Back to skill

Security audit

邱国鹭品质分析

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown-only Chinese finance analysis checklist with no executable code, persistence, credential use, or hidden data access.

Install only if you want a Chinese-language company-quality checklist based on this investment framework. Treat its scores and template suggestions as educational screening aids, not personalized investment advice, and verify financial data, valuation, industry context, and local regulatory considerations separately.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The document title and core description are presented entirely in Chinese and frame the skill package as Chinese-language by default, with no indication that users may choose another language. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill’s activation description uses broad triggers like '当用户需要分析公司品质时' and '当用户问"这是好公司吗"时', which can cause the agent to invoke this skill in overly broad financial-advice contexts. In a finance-related skill, ambiguous routing increases the chance of inappropriate or overconfident analysis being applied to user requests that need narrower scope, additional disclaimers, or different tooling.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

This markdown template is entirely written in Chinese, including the title, section headings, labels, and guidance, which implicitly requires use of a specific language. The file does not offer an opt-in language choice or explain that the template is intended only for a Chinese-speaking or region-specific context, so it constitutes a natural-language locale policy issue.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
83% confidence
Finding

The skill documentation and examples are entirely in Chinese, and there is no indication that the user can choose another language or that the language restriction is intentional for a region-specific use case. Per the policy, forcing a specific language without user opt-in can be a natural-language policy issue.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.