Security audit

护城河评估师

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language markdown skill for evaluating company competitive moats, with no code execution, credential use, persistence, or broad system access.

Installers should know this skill is written for Chinese-language moat and value-investing analysis and may produce investment recommendations; users should treat its output as research support, not financial advice. No artifact-backed evidence suggests hidden execution, data exfiltration, or privileged behavior.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Natural-Language Policy Violations

Medium

Confidence: 91% confidence
Finding: The file title and description are written entirely in Chinese, indicating the skill documentation is localized to a specific language by default. There is no visible opt-in, alternative language option, or justification that this skill is intended only for a Chinese-speaking or region-specific context.

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: The manifest description is written as a direct usage instruction in Chinese and the skill throughout defines inputs, enums, and outputs only in Chinese, with no indication that users may choose another language. This creates a language/locale constraint without opt-in, which matches the policy category for natural-language language-choice violations.

Natural-Language Policy Violations

Medium

Confidence: 90% confidence
Finding: The parameter enums and expected output labels use only Chinese values such as "有/无/不确定", "高/中/低", and Chinese recommendation labels, which effectively enforce a specific language for interaction. Because the file does not offer multilingual support or justify a Chinese-only regional scope, this is a natural-language policy concern.

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: This markdown file presents all instructions and reference material exclusively in Chinese, and there is no indication that the user can choose another language or that the content is intentionally limited to a Chinese-speaking audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: This markdown template forces a specific language/locale for all users through its headings, labels, and instructions. Under the policy, language constraints should either be optional via user choice or clearly documented as a justified region-specific limitation.

Static analysis

No suspicious patterns detected.