Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 70% confidence
- Finding
Without declared permissions the skill's intent is opaque and cannot be validated.
- Content
Security audit
zhujue-characters
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local Chinese novel lookup helper whose file access and scripts match its stated purpose.
Install only if you want a Chinese-language helper for 《主角》. It runs local Python scripts over bundled text and may write extracted passages to a path you choose; retrieved source passages can include mature or derogatory literary content from the novel.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (96)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The entire skill description and operating instructions are written only in Chinese, and the skill is framed around Chinese-language invocation and outputs without any indication that users may choose another language. This creates a natural-language policy concern because it imposes a specific language/locale by default rather than offering an explicit user choice.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
This code file contains natural-language instructions and status output entirely in Chinese, including the main module description and runtime messages. Under the stated policy, forcing a specific language without user opt-in is a locale-policy issue unless the constraint is explicitly justified, which is not documented here.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The natural-language content of the file is entirely in Chinese, and the title at L04 is also Chinese, with no indication that users can select another language or that the file is part of a clearly documented region-specific experience. Under the stated policy, forcing a specific language without opt-in is a locale/language policy violation.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
This file presents all user-visible natural-language content in a single language and does not provide any opt-in, alternative locale, or justification that the skill is region-specific. Under the language/locale policy, forcing a specific language without user choice is a policy concern.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 87% confidence
- Finding
The file title is Chinese ("未知"), and the document content is entirely in Chinese with no indication that users can choose another language or locale. Under the stated policy, forcing a specific language without opt-in is a natural-language policy concern applicable to all file types.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The flagged passage contains repeated derogatory and demeaning gendered language aimed at a gender-nonconforming character, including slurs and ridicule. In a skill that retrieves and exposes source text directly to users, this creates a genuine safety issue because the system may surface hateful or harassing content without warning, contextualization, or mitigation.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 84% confidence
- Finding
The file's visible natural-language content is entirely in Chinese, and there is no indication that users can choose another language or that the Chinese-only presentation is required for a documented regional purpose. Under the stated policy, forcing a specific language without opt-in is a natural-language policy concern applicable to all file types.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The document title and all visible body content are written exclusively in Chinese, with no indication that language selection is optional or that the file is part of a clearly documented region-specific skill. Under the stated policy, forcing a specific language or locale without opt-in is a natural-language policy violation.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The HTML content is entirely written in Chinese, including the title and body text, with no indication that language selection is optional or configurable. Under the policy rule for natural-language violations, this constitutes a forced language/locale presentation without user opt-in.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The file's visible title and body content are entirely in Chinese, with no indication that language choice is optional or that the skill is specifically limited to a Chinese-language context. Under the policy, forcing a specific language without user opt-in or documented justification is a locale/language policy violation.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The file's visible content is entirely in Chinese, including the title and body text, with no indication that language selection is optional or that the skill is intentionally limited to a Chinese-language audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The document title and all visible body content are in Chinese, with no indication that the skill offers a language choice or that the Chinese-only locale is required for a region-specific purpose. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
This HTML file contains exclusively Chinese-language natural-language content and provides no indication that the language choice is optional, user-selected, or justified by a region-specific constraint. Under the policy, forcing a specific language or locale without opt-in is a natural-language policy violation applicable to all file types.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 87% confidence
- Finding
Line L148 explicitly states '一律称同志' ('uniformly address people as comrade'), which is a natural-language requirement enforcing a specific form of address. This is a language/locale-style constraint presented without any user opt-in or contextual justification tied to a region-specific compliance need.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
This HTML file contains narrative content entirely in Chinese, starting with the Chinese title and continuing through the body text, with no indication that the language is optional or region-specific. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The title and body content are entirely in Chinese, and the file provides no indication that language selection is optional or that the content is intended only for a Chinese-language or region-specific context. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
This HTML file presents substantial user-facing natural-language content entirely in Chinese, and there is no indication of user opt-in, language selection, or documented locale constraint. Under the stated policy, forcing a specific language without user choice is a natural-language policy violation.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The visible natural-language content of the file is entirely in Chinese, with no indication that the skill offers a language choice or that the locale restriction is justified by a region-specific purpose. Under the policy, forced language or locale without user opt-in is a reportable natural-language policy violation.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The file's visible title is in Chinese ("未知"), and the entire document content is written exclusively in Chinese with no indication of alternative language support or user opt-in. Under the policy rule, fixed language behavior without user choice is a locale/language policy violation unless clearly documented as region-specific or optional.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The document content, including the title and all body text, is entirely in Chinese, and there is no indication that language selection is optional or that the file is intended for a justified region-specific use. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The visible natural-language content of the file is entirely in Chinese, beginning with the title at L004 and continuing throughout the document. There is no indication that the skill offers a language choice, user opt-in, or a justified region-specific constraint, which matches the policy concern for forced language or locale.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The file's visible content is entirely in Chinese, including the title and body text, with no indication that alternative languages are supported or that the locale restriction is intentional and justified. Under the stated policy, forcing a specific language without user choice is a natural-language policy violation.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 84% confidence
- Finding
This HTML file contains repeated natural-language text in Chinese and includes derogatory terms and speculation about a person being '同性恋' as well as repeated slurs such as '娘儿们' and '二刈子'. For SQP-3, natural-language policy issues apply to all file types, and the file also presents content entirely in a specific language/locale without any opt-in or documented region-specific justification.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The file's visible natural-language content is entirely in Chinese, with no indication that users may choose another language or locale. Under the stated policy, language constraints should either be optional or explicitly justified; this file provides neither.
- Content