Back to skill

Security audit

strategy-thinking

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown-only planning skill with coherent Chinese strategy guidance and no evidence of unsafe access, persistence, or hidden behavior.

Install this if you want a Chinese planning and strategy assistant. Expect it to guide conversations about goals, constraints, options, and next steps; review its advice as planning support, not a substitute for your final decision or verified market research.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (8)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The instruction "输出语言:直接、利索、有观点" appears within an otherwise fully Chinese-language skill definition and establishes a fixed language/locale behavior without any user opt-in or alternative language option. This creates a natural-language policy concern because the skill is implicitly constrained to Chinese rather than offering the user's preferred language.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
73% confidence
Finding

The file presents all user-facing heuristic guidance exclusively in Chinese and does not indicate that language selection is optional or user-driven. Under the stated policy, forcing a specific language without opt-in can be a locale or language policy violation unless clearly justified.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
87% confidence
Finding

The phrase '默认作为内部导航参考' combined with '不要求每次显式调用' describes a default trigger behavior without a concrete activation boundary. Although some exclusion examples are provided elsewhere, this line still leaves ambiguity about when the heuristic should activate versus remain inactive in normal interactions.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
82% confidence
Finding

The trigger description relies on subjective conditions like '存在多个可行方向' and '不确定性高', plus example signals labeled as '柔性参考,非硬规则'. This makes activation dependent on broad interpretation and may lead to inconsistent or unintended invocation across ordinary planning conversations.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
81% confidence
Finding

该技能核心文档标题及全文均以中文定义方法规则,但未说明这是面向中文用户的限定场景,也未提供语言选择或切换说明。按照规则,若技能在自然语言层面默认强制特定语言而没有用户 opt-in,可能构成语言/locale 政策问题。

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The file is written as a runtime specification titled in Chinese and does not indicate that language choice should follow user preference or offer any opt-in for locale. Under the policy rule for natural-language constraints, forcing a specific language without user choice is a reportable issue unless the locale restriction is clearly documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file is written as a user-facing skill reference entirely in Chinese, starting with a Chinese-only title and continuing throughout without any indication that language choice is optional. The policy allows locale constraints only when opt-in is offered or the regional limitation is clearly documented and justified, which is not present here.

Content

No source excerpt is available for this finding.

Vague Triggers

Low
Category
Not specified by scanner
Confidence
76% confidence
Finding

The condition '存在多个方案需要比较时' is directionally helpful but still broad, especially because the same section says dimensions vary by project. Without clearer scope, the heuristic may activate in loosely comparative discussions that do not warrant a full comparison framework.

Content

No source excerpt is available for this finding.