李录投资智慧

• Outcome: Pass
• Latest audit: Sep 12, 2026 · 8:22 AM UTC
• Version: 2.0.0

Overview

This is a text-only, opinionated Chinese-language investment-analysis skill with disclosed China/value-investing framing and no code execution, persistence, or data access.

Install only if you want an opinionated Li Lu/China-focused investing framework. Treat outputs as educational analysis, not personalized financial advice, and compare against current market data, risks, and alternative viewpoints before making investment decisions.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (11)

Natural-Language Policy Violations

Medium

• Confidence: 91% confidence
• Finding: The README is written entirely in Chinese and presents the skill as a general-purpose package without any notice that the language is fixed or optional. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly documented and justified.

Natural-Language Policy Violations

Medium

• Confidence: 94% confidence
• Finding: The entire skill description, trigger phrases, input/output schema, and examples are written only in Chinese, with no indication that users may interact in other languages or opt into this locale. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly documented and justified.

Natural-Language Policy Violations

Medium

• Confidence: 94% confidence
• Finding: The entire README is written in Chinese, and there is no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking or region-specific audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The skill declares very broad activation conditions such as analyzing Chinese investment opportunities, asking about 'core Chinese assets,' modernity analysis, or applying a named theory. Broad triggers increase the chance the agent invokes this skill in loosely related contexts, which can bias responses toward a specific investment thesis without sufficient user intent or suitability checks.

Natural-Language Policy Violations

Medium

• Confidence: 86% confidence
• Finding: The file is entirely written in Chinese and the description/instructions do not state that the skill can adapt to the user's preferred language or that the Chinese-only constraint is required for a documented regional purpose. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Natural-Language Policy Violations

Medium

• Confidence: 95% confidence
• Finding: The document is written entirely in Chinese and presents the skill as a general-purpose package, but it does not indicate that Chinese is optional, user-selected, or required for a region-specific compliance reason. This creates a natural-language policy concern because it effectively imposes a specific language/locale without opt-in.

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The skill’s activation description is broadly phrased around long-term trend analysis, civilization progress, and investment questions, which can cause the agent to invoke this skill in contexts where its ideological framing is not appropriate or sufficiently scoped. In an investment-related skill, ambiguous triggers increase the chance of unsolicited advice, over-application of a single framework, and user steering without clear limitations or opt-in.

Natural-Language Policy Violations

Medium

• Confidence: 94% confidence
• Finding: The statement '中国是最大机会' promotes a fixed China-centric investment preference as a core principle rather than as a conditional or user-selected thesis. In a financial analysis skill, this can bias outputs toward a specific geography regardless of the user’s objectives, risk profile, or market context, leading to systematically slanted recommendations.

Natural-Language Policy Violations

Medium

• Confidence: 96% confidence
• Finding: The closing statement reinforces a mandatory China-centric framing by asserting that China is the biggest opportunity of the 21st century without qualification. Because it appears as a final takeaway, it can unduly anchor downstream model behavior and push investment guidance toward one locale even when unrelated to the user’s request.

Natural-Language Policy Violations

Low

• Confidence: 95% confidence
• Finding: This markdown file contains user-facing instructions only in Chinese, which can amount to forcing a specific language without user opt-in. The file does not indicate that the skill is region-specific or provide an alternative language/locale option.

Natural-Language Policy Violations

Low

• Confidence: 93% confidence
• Finding: This markdown template appears to require use of Chinese throughout, including headings, labels, and instructions, but it does not provide any user opt-in or alternative language option. Under the stated policy, forcing a specific language without user choice is a natural-language policy violation unless the locale restriction is clearly documented and justified.

Static analysis

No suspicious patterns detected.