Back to skill

Security audit

Idea Darwin 日本語版

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Japanese idea-development workflow that creates and updates local project notes, with no evidence of hidden execution, credential access, network retrieval, persistence, or destructive behavior.

Install this skill if you want a Japanese-language local workflow for evolving ideas into structured cards and reports. Review the generated project files before relying on outputs, and keep in mind that it will write and update local notes under the current project directory.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill is identified as a Japanese edition and all user-facing documentation and commands are presented only in Japanese, indicating an implicit language constraint. The file does not offer any user choice or opt-in for language/locale, which matches the policy-violation criterion for forced language selection.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown template uses Japanese throughout the title, section headings, and instructions, which imposes a specific language on users. The file does not indicate that Japanese is optional, user-selected, or required for a justified region-specific purpose.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

This markdown file is entirely written as prescriptive operational guidance in Japanese, and it does not indicate that language selection is optional or limited to a Japan-specific context. Under the language/locale policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

The entire prompt template file is written exclusively in Japanese and directly instructs how the model should operate, with no indication that the user can choose another language or that the skill is intentionally limited to a Japanese-only context. This creates a natural-language locale policy concern because the skill appears to impose a specific language by default rather than offering opt-in or documenting a justified regional constraint.

Content

No source excerpt is available for this finding.