Back to skill

Security audit

reshape-your-life(重塑你的人生)

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese life-planning coaching skill with no executable code or hidden system access, but users should treat it as reflective coaching rather than mental health support.

Install only if you want a Chinese-language structured self-reflection and life-planning coach. Do not rely on it for crisis support, psychiatric issues, or professional mental-health advice; users should pause or seek qualified help if the prompts feel distressing.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The skill description and trigger framing are broad enough that ordinary expressions of confusion, stress, or life dissatisfaction could activate a deep psychological coaching flow without clear user consent. In a general assistant context, this can cause inappropriate takeover of conversations, overconfident life guidance, and mismatch with users who wanted practical or emotional support instead.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
81% confidence
Finding

该文件的描述与全套交互指令均以中文固定编写,并在 L020-L040 要求“必须首先输出以下开场白”,但没有说明可根据用户语言偏好切换。对于通用技能,这种默认强制单一语言输出会构成语言/locale 选择上的自然语言策略问题。

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill lacks clear boundaries on when not to activate and when to defer, despite operating in a sensitive self-concept and purpose-setting domain. Without explicit constraints, the assistant may apply a rigid, high-influence framework to unsuitable situations, including vulnerable users or contexts requiring professional mental-health support.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The script is entirely in Chinese and does not offer a language-choice step or document that the skill is intentionally restricted to Chinese-speaking users. This can cause misunderstanding of nuanced coaching prompts, consent boundaries, and action-planning steps for non-Chinese users, which is more concerning here because the content involves sensitive self-reflection rather than simple informational output.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

This section prompts deep existential and identity-focused self-reflection ('你来到这个世界,是为了什么?', future-self visualization, mission framing) without any boundary-setting, emotional safety note, or escalation guidance for distressed users. In a life-planning/coaching skill, such prompts can intensify distress, shame, dependency, or rumination for vulnerable users, especially those already feeling lost or emotionally unstable.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

This markdown file contains user-facing instructional content exclusively in Chinese from start to end. Under the language/locale policy rule, forcing a single language without offering user choice or documenting a justified locale constraint can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.