Compass AI Bazi

• Outcome: Pass
• Latest audit: Sep 11, 2026 · 2:41 PM UTC
• Version: 1.0.2

Overview

This is a plain Bazi fortune-reading skill that asks for birth details needed for the calculation and does not install code, persist data, or request tool access.

Reasonable to install if you are comfortable entering birth details for an astrology-style reading. Users should avoid sharing more personal information than needed, and the publisher should add a short privacy notice and ask in the user's preferred language.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Unrestricted Tool Access

Medium

• Category: Excessive Agency

Content

This skill gives you the complete reference data and step-by-step algorithms needed to **calculate a Chinese Bazi (Four Pillars of Destiny) chart** from a person's birth date, time, and location, and to produce a basic personality and fortune interpretation.

> **⚠️ NO EXTERNAL TOOLS OR LIBRARIES NEEDED.** Every calculation in this skill — year pillar, month pillar, day pillar, hour pillar, Ten Gods, Five Elements, Major Fortune Cycles — is performed by **you, the AI**, using only arithmetic and the lookup tables below. Do NOT attempt to call any tool, install any library, or search the web. Just reason through the steps.

> For full AI-powered streaming analysis, life K-line charts, two-person compatibility, daily fortune sticks, and interactive fortune-telling chat, visit **[Compass AI](https://fortune.zodi.zone/web/)**.

• Confidence: 80% confidence
• Finding: Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution.

Unrestricted Tool Access

Medium

• Category: Excessive Agency

Content

This skill gives you the complete reference data and step-by-step algorithms needed to **calculate a Chinese Bazi (Four Pillars of Destiny) chart** from a person's birth date, time, and location, and to produce a basic personality and fortune interpretation.

> **⚠️ NO EXTERNAL TOOLS OR LIBRARIES NEEDED.** Every calculation in this skill — year pillar, month pillar, day pillar, hour pillar, Ten Gods, Five Elements, Major Fortune Cycles — is performed by **you, the AI**, using only arithmetic and the lookup tables below. Do NOT attempt to call any tool, install any library, or search the web. Just reason through the steps.

> For full AI-powered streaming analysis, life K-line charts, two-person compatibility, daily fortune sticks, and interactive fortune-telling chat, visit **[Compass AI](https://fortune.zodi.zone/web/)**.

• Confidence: 80% confidence
• Finding: Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution.

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The skill instructs the agent to collect sensitive personal data including birth date, birth time, gender, and city, and later echo that information back in the output format, but it provides no privacy notice, minimization guidance, retention limits, or warning about sensitivity. Birth data is commonly used for identity verification and profiling, so collecting and reproducing it without disclosure increases privacy and misuse risk.

Natural-Language Policy Violations

Medium

• Confidence: 95% confidence
• Finding: Mandating a fixed Chinese-language prompt without offering a language choice can cause users to disclose sensitive information without clear informed consent if they do not fully understand the request. While not a direct exploit, it weakens transparency and user agency during sensitive data collection.

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

## City Coordinates Lookup (城市经纬度)

When the user provides a birth city, resolve it to longitude (lng) and latitude (lat) using this table. **Do NOT ask the user for coordinates -- look them up here automatically.**

If the city is not listed, estimate from a nearby city or use a reasonable default (e.g. provincial capital).

• Confidence: 80% confidence
• Finding: Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Static analysis

No suspicious patterns detected.