Security audit

Xiwang Medical Content

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent Chinese medical-content generator, but it includes disease treatment instructions and strong medical claims without enough safety guardrails for public use.

Review this skill carefully before installing if it will generate consumer-facing health or medical marketing content. It should add prominent language that outputs are informational, not medical advice, and should require clinician consultation, contraindication and adverse-event warnings, and clear labeling of unpublished or preliminary evidence.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (10)

Missing User Warnings

High

Category: Not specified by scanner
Confidence: 98% confidence
Finding: This section gives specific disease-targeted treatment instructions, body locations, frequency, and duration for moxibustion without any warning to seek qualified medical advice, contraindications, or emergency guidance. In the context of a skill designed to generate medical-related content for end users, this can facilitate unsafe self-treatment, delayed diagnosis, burns, or misuse for conditions that require professional care.
Content: No source excerpt is available for this finding.

Ae4

Medium

Category: analysis-evasion
Confidence: 80% confidence
Finding: Suspicious Unicode normalization or mixed-script content
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The manifest description and overview are entirely in Chinese and describe the skill as generating Chinese platform-specific content, but they do not state that the skill is limited to Chinese by design or offer an opt-in language choice. Under the language/locale policy rule, a skill should not impose a specific language implicitly unless that constraint is explicitly justified or user-selectable.
Content: No source excerpt is available for this finding.

Ae4

Medium

Category: analysis-evasion
Confidence: 80% confidence
Finding: Suspicious Unicode normalization or mixed-script content
Content: No source excerpt is available for this finding.

Ae4

Medium

Category: analysis-evasion
Confidence: 80% confidence
Finding: Suspicious Unicode normalization or mixed-script content
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This file summarizes claimed clinical effects, mechanisms, and treatment outcomes across serious conditions including cancer, thyroid disease, cardiovascular risk, and insomnia, but it provides no clear disclaimer that the material is informational only and not medical advice. In a skill explicitly designed to generate public-facing medical content, that omission can cause users to treat promotional or incomplete research summaries as treatment guidance, increasing risk of harmful self-treatment or delayed professional care.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The section on '瞑眩反应' presents symptoms such as pain, unusual sweating/odor, itching, blisters, eye redness, and swelling as part of a rebalancing or detox process, without warning that these may indicate adverse effects requiring cessation or medical evaluation. In context, this can normalize harm signals and discourage users from seeking care, which is especially dangerous in a skill used to generate persuasive health-related copy.
Content: No source excerpt is available for this finding.

Ae4

Medium

Category: analysis-evasion
Confidence: 80% confidence
Finding: Suspicious Unicode normalization or mixed-script content
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file is entirely written in Chinese, beginning with the title at L001 and continuing throughout the document. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation when no alternative language option or justification is provided.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: This markdown file presents all user-facing content exclusively in Chinese and does not indicate that the skill is region-specific or that users can choose another language. Under the language/locale policy check, forcing a specific language without opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.