Security audit

company-law

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese company-law reference skill with templates and legal workflow guidance; it is advisory content only and does not install code, run commands, persist itself, or access user data.

Install this only if you want Chinese-language PRC company-law and governance guidance. Treat the templates and litigation steps as educational drafting aids, verify current law and case citations, and consult a qualified lawyer before using them for disputes, filings, asset preservation, or other consequential legal action.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration

Findings (15)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The trigger list contains very broad, high-frequency terms such as '公司法', '章程', '董事会', '合同审查', and '新公司法', which are likely to appear in many general legal or business conversations. This can cause the skill to be invoked outside the user's actual intent, leading to irrelevant legal-style guidance being surfaced in unrelated contexts and increasing the chance of inappropriate reliance on non-contextualized advice.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The file goes beyond neutral legal/governance education and presents structured 'attack/defense' tactics, including pressure strategies, evidence-gathering, asset freezing, criminal reporting, and exploiting legal ambiguity before judicial clarification. In an agent skill, this can steer outputs toward adversarial legal maneuvering against counterparties rather than balanced compliance guidance, increasing the risk of misuse for harassment, coercive litigation, or unfair pressure.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: These sections provide actionable litigation and escalation routes—such as sequencing evidence collection, lawsuits, asset preservation, and criminal referral—that are not necessary for the skill's stated purpose of company-law governance design. Because they are procedural and optimization-oriented, they materially enable users to operationalize legal pressure campaigns, especially against minority counterparties or distressed debtors.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The entire skill content is presented only in Chinese, with no indication that the user can choose another language or locale. Under the policy criteria, forcing a specific language without opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This markdown file presents all instructions and checklist content only in Chinese, and does not state that the user opted into Chinese or that the skill is restricted to a Chinese-speaking or PRC-specific audience. Under the language/locale policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The entire skill is written in Chinese and presents all instructions, labels, and guidance exclusively in that language, with no indication that the user can choose another language. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is clearly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 86% confidence
Finding: The entire skill file is written in Chinese and does not indicate that language selection is optional or that the skill is intentionally limited to Chinese-speaking users. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: This markdown file contains extensive user-facing instructional content solely in Chinese, but it does not indicate that the user opted into Chinese or that the material is restricted to a Chinese-language/legal context. Under the language/locale policy criterion, forcing a specific language without user choice can be a natural-language policy issue.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The entire document is written in Chinese and does not indicate that other languages are available or that Chinese is required for a specific regional-compliance purpose. Under the stated policy, hard-coding a single language without user opt-in can be a natural-language policy issue.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: This markdown file presents all instructions and reference material exclusively in Chinese, and it does not mention that the language is fixed, optional, or selectable by the user. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all guidance exclusively in Chinese and does not provide an opt-in, alternative language, or justification that the skill is intentionally region- or locale-specific.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 77% confidence
Finding: The title and stated purpose explicitly define the methodology as a reusable source of Chinese legal information and search strategy, with no indication that users may choose another language or locale. This can be a language/locale policy issue when a skill or reference material forces a specific language without user opt-in.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file contains only Chinese-language content and does not provide an opt-in, alternative language, or a justification that the skill is intentionally limited to Chinese-speaking users. Under the policy, forcing a specific language without user choice can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The entire skill content is presented only in Chinese, including headings, instructions, and checklist items, with no indication that users may choose another language. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the regional constraint is clearly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: This markdown file contains user-facing instructions only in Chinese, from the title through the checklist content. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale restriction is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.