Security audit

job-analysis-work

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese study helper for job analysis methods, with no code execution, persistence, credential use, or hidden data flow found.

Install this if you want a Chinese-language tutor for work-oriented job analysis methods. If you need English or another language, check whether your agent will honor an explicit language request, because the skill itself defaults to Chinese.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (6)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill explicitly instructs the assistant to respond in Chinese regardless of the user's explicit language preference. This can override user autonomy and create prompt-quality or accessibility issues, especially in multilingual environments where the user expects the assistant to follow the conversation language or requested output language. In this skill, the effect is limited because the surrounding content is educational and not attempting data exfiltration or policy bypass.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: This markdown file is written entirely in Chinese and does not indicate that other languages are supported or that Chinese is a required locale for a region-specific purpose. Under the policy rule, language constraints should either be optional for the user or explicitly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The document presents all user-facing instructional content in a single language and does not indicate that Chinese is optional, user-selected, or required for a region-specific purpose. This can violate a language/locale policy when a skill implicitly forces one language without user opt-in.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This reference document is primarily written in Chinese, including headings and explanatory content, with no indication that users can choose another language or that the document is intentionally limited to a Chinese-speaking audience. Under the policy rule, forcing a specific language without user opt-in is a natural-language locale violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The entire skill reference is written in Chinese and does not indicate that language selection is optional or that the material is intentionally limited to Chinese-speaking users. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: This reference file presents the skill content entirely in Chinese, starting at L03 and continuing throughout, with no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.