Back to skill

Security audit

Tech Solution Research

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown-only technical research workflow skill with disclosed source-gathering and report-generation behavior.

Install this if you are comfortable with a Chinese-first technical research workflow that may use web searches, GitHub/platform tools, runtime tests, and scoped internal materials to build reports. Ask for a preferred output language and avoid granting access to private repositories or internal documents unless they are necessary for the research task.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (6)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The manifest description begins with Chinese-only wording ("技术方案调研/框架选型/技术对比/最终报告生成") and the rest of the document is primarily written in Chinese, with no indication that users may choose another language. This can violate language/locale policy when a skill implicitly requires a specific language without opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The title and all report sections are written exclusively in Chinese, indicating the template expects reports to be produced in Chinese by default. For a general-purpose report template, this is a natural-language locale constraint without any user opt-in or stated regional justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
82% confidence
Finding

This markdown file mixes bilingual headings with body instructions written in Chinese and does not indicate that language selection is optional. Under the policy, forcing or assuming a specific language without user opt-in can be a locale/language policy violation unless clearly justified as region-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
86% confidence
Finding

The document is written entirely in Chinese and presents required reporting structure and usage rules in that language, but it does not offer a language choice or state that the skill is intentionally limited to a Chinese-language or region-specific context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
81% confidence
Finding

The document title and all procedural content are written in Chinese, and there is no indication that users may choose another language or locale. Under the language/locale policy, forcing a specific language without opt-in is a natural-language policy concern unless the constraint is explicitly documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
82% confidence
Finding

This markdown file presents the skill content primarily in Chinese while embedding English field names, but it does not state that the document is intentionally Chinese-only or provide any user language choice. Under the language/locale policy, forcing a specific language without opt-in can be a policy concern.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.