Back to skill

Security audit

intimate-ch09-sexuality

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language study aid for a textbook chapter on sexuality, with no code, installs, network access, persistence, or hidden behavior observed.

Install this only if you want a Chinese-language educational helper for this textbook chapter. It discusses sexual behavior, safe sex, consent, and coercion in an academic way and explicitly avoids replacing medical, legal, therapy, or crisis support.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (10)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

Line L25 explicitly requires '中文回答' for responses. This is a natural-language locale constraint that forces a specific language without any user opt-in or alternative, which matches the policy-violation criteria for language/locale restrictions.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The file’s operative instructions are written as mandatory Chinese-language usage guidance, including when to read the file and how to answer. There is no indication that the user can choose another language or that the Chinese-only behavior is required for a region-specific or compliance reason.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The section heading and usage instructions are written entirely in Chinese, indicating the skill content is constrained to a specific language. Under the policy, language-specific behavior should either provide user opt-in/choice or clearly document a justified locale limitation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

This markdown file is written as operational guidance for using the examples, and the usage section is entirely in Chinese with no indication that other languages are supported or that Chinese is optional. Under the policy rule, a skill that imposes a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The operational instructions and all substantive guidance are written in Chinese, and the file gives no indication that users may choose another language or that the skill is intentionally limited to a Chinese-language audience. Under the policy, a skill that effectively requires a specific language without opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The natural-language instructions and all term definitions are presented in Chinese, and the usage guidance implies the skill should respond using this file as its source. There is no indication that users can opt into another language or that the Chinese-only constraint is required for a region-specific purpose, which creates a language/locale policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The instructions and usage guidance require interacting with the file in Chinese, but there is no indication that users can opt into this language or that the skill is intentionally limited to a Chinese-language audience. This can violate a language/locale policy when a skill forces a specific language without user choice.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The operational instructions and all guidance are written in Chinese, including a directive on when to use the file, but there is no indication that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking context. This can violate language/locale policy when a skill implicitly forces one language without opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The operational instructions in this markdown file are written as mandatory Chinese-language usage guidance ('用户问...时读本文件'), and the file provides no option for alternative languages or any explanation that the skill is region-specific. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

The usage instructions and content are presented only in Chinese, with no indication that users may choose another language or that the locale restriction is intentional and justified. This can violate a language-choice policy when a skill effectively forces a specific language without user opt-in.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.