Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 86% confidence
- Finding
清单中的展示名称使用中文本身不构成问题，但全文说明与输出规范均默认中文语境，且未说明是否支持按用户语言偏好切换。根据该规则，若技能在自然语言层面默认强制某一语言而不给用户选择，属于语言/locale 策略风险。
- Content
Security audit
robot-testcase-generator
Security checks for vulnerabilities and agentic risk
Overview
This is a Chinese-language robot test-case generation skill that creates structured Excel outputs and does not show hidden execution, exfiltration, or persistence behavior.
Install this if you want a Chinese-oriented workflow for generating robot test cases and Excel deliverables. Review generated test cases before using them for safety or standards compliance, since the skill may infer missing requirements and standards coverage.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The trigger conditions are broad and overlap with common robotics, testing, and safety-related terms, which can cause the skill to activate outside its intended scope. Mis-triggering is dangerous because it may route unrelated user inputs into a rigid test-case-generation workflow, increasing the chance of incorrect outputs, context confusion, or unintended handling of sensitive technical documents.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
This markdown file is entirely written in Chinese and specifies the expected output workflow in Chinese, but it does not offer any language or locale choice to the user. Under the policy, forcing a specific language without opt-in is a natural-language policy violation unless the locale restriction is clearly justified.
- Content