Gen Coding Specs

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 4:07 AM UTC
• Version: 1.0.0

Overview

This skill is a scoped documentation generator, though users should review one weak encryption example before relying on the generated security guidance.

Install only if you want a Chinese-language coding-spec generator that writes under docs/coding-specs. Review generated files before adopting them, especially the security template's encryption guidance and the version-control rollback section.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

• Location: coding.security.md:126

Finding

Deprecated and Unauthenticated Encryption Recommended for Sensitive Data

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration

Findings (19)

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 30)May include surrounding context.

md

- **本仓库**：`skills/gen-coding-specs/templates/`（与 `SKILL.md` 同级下的 `templates/`）

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 31)May include surrounding context.

md

- **本仓库**：`skills/gen-coding-specs/templates/`（与 `SKILL.md` 同级下的 `templates/`）

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · coding.api.md (reported line 33)May include surrounding context.

GET /api/v1/users/:id # 获取指定用户 POST /api/v1/users # 创建用户 PUT /api/v1/users/:id # 更新用户 DELETE /api/v1/users/:id # 删除用户

text

> 本模板以下章节以 **方式 A（统一 POST）** 为示例。若项目采用 RESTful 风格，请将 HTTP 方法替换为对应语义，请求体格式保持不变。

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · coding.version-control.md (reported line 157)May include surrounding context.

md

*.class

# 环境配置
.env
.env.local

# IDE配置

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · coding.version-control.md (reported line 158)May include surrounding context.

md

# 环境配置
.env
.env.local

# IDE配置
.idea/

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 95% confidence

Finding

git reset --hard is a destructive command that can be abused or mistakenly executed to wipe local changes and rewrite the working tree to an earlier commit. In a coding-spec generation skill, including this command without guardrails is risky because downstream agents or users may treat it as a normal recovery step and trigger irreversible data loss.

Content

Scanner excerpt · coding.version-control.md (reported line 251)May include surrounding context.

git reset --mixed

回退到指定提交（不保留）

git reset --hard

text

---

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

The skill explicitly instructs creation of and repeated writes to docs/coding-specs, including overwrite behavior, but does not require an explicit warning or confirmation before modifying workspace files. In an agent setting, this increases the risk of silent or unexpected repository changes, especially if the skill is triggered automatically or by ambiguous language.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The trigger phrase "技术规范" is extremely broad and can match ordinary user requests about technical specifications, causing this skill to activate outside the user's intended context. Because the skill performs workspace writes and can overwrite generated documentation, accidental invocation can lead to unintended file creation or replacement based on incomplete or irrelevant context.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 86% confidence

Finding

The entire skill document is written exclusively in Chinese and does not indicate that other languages are supported or that Chinese is optional. Under the language/locale policy, forcing a single language without user opt-in can be a natural-language policy violation unless the locale restriction is explicitly documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 89% confidence

Finding

该技能文件的标题及全文内容均以中文编写，体现出默认且唯一的语言约束，但文档中没有说明这是面向特定中文团队/区域的限定，也没有提供语言选择或用户自愿切换机制。根据语言/locale 政策，未经用户选择即强制单一语言可能构成自然语言策略违规。

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

The title and all instructional content are written in Chinese, and the document does not indicate that language selection is optional or that the skill is intended only for a Chinese-language context. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

This markdown file consists solely of Chinese-language instructions and examples, with no indication that the user can choose another language or that the skill is intentionally restricted to Chinese-speaking contexts. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The skill content is written entirely in Chinese and presents itself as a normative specification without any indication that users may choose another language or that the locale restriction is region-specific. This can violate language/locale policy when a skill forces a specific language without user opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 89% confidence

Finding

该技能文档全文使用中文编写，但未说明这是面向特定中文用户群体、地区合规要求，或提供其他语言选项。根据规则，强制特定语言而没有用户选择或明确正当化，属于自然语言层面的语言/地区策略问题。

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

文件标题及全文内容均使用中文表述，但没有说明这是面向特定中文用户群体的区域性规范，也没有提供语言选择或用户选择加入的机制。根据语言/区域政策，若技能文档强制单一语言而无明确理由或用户选择，属于自然语言层面的政策风险。

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The document explicitly recommends git reset --hard <commit> as a rollback operation without any warning that it discards uncommitted changes and can irreversibly destroy local work. In a skill that generates coding specifications for downstream agent consumption, this is more dangerous because automated or inexperienced users may follow it verbatim and cause repository data loss.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 81% confidence

Finding

该技能文件的自然语言内容全部为中文，作为规范文档直接面向使用者，但未说明是否允许用户选择其他语言版本，也未给出该语言限制的组织性理由。根据语言/locale 政策，强制单一语言且无用户选择或明确正当性，属于可报告的自然语言策略问题。

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 83% confidence

Finding

This markdown file contains normative guidance entirely in Chinese and presents itself as a general data-model standard. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be a locale/language policy issue when no justification or alternative is provided.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

This markdown skill file is written as a prescriptive development standard in Chinese and does not indicate that language choice is optional. Per the policy, forcing a specific language or locale without user opt-in can be a natural-language policy violation unless the regional constraint is explicit and justified.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.