Security audit

君黎AI拆书

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent Chinese novel-analysis workflow that reads a user-selected text file and creates local project files for writing-reference outputs.

Install this if you want a Chinese-language workflow for turning a local novel text file into writing-reference notes. Use a dedicated ./story workspace, do not provide private or unrelated .txt files, and be aware that generated chunk files may contain excerpts or full portions of the source text locally.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (9)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 91% confidence
Finding: The skill instructs the agent to read a user-supplied local absolute .txt path and to create or modify files under project directories, but it does not declare any explicit tool scope or path restrictions. That mismatch can let an agent access broader local filesystems than intended, increasing the chance of unauthorized file reads or writes if the user supplies sensitive paths or if the workflow is invoked in an overprivileged environment.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The manifest description and document title/instructions are entirely in Chinese and present the skill as fixed-purpose Chinese output, with no indication that users may choose another language. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This markdown file is entirely written as prescriptive skill guidance in Chinese, and it does not indicate that language selection is optional or limited to a region-specific use case. Under the policy, forcing a specific language or locale without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This Python file hard-codes Chinese-only docstrings, CLI help text, printed output, and generated markdown/template content throughout the script. Under the policy rule for natural-language violations, forcing a specific language without user opt-in is in scope, and the file does not provide any language selection or explain that the skill is intentionally limited to a Chinese-only regional context.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This Python file contains natural-language strings for the docstring, status messages, errors, and argument help entirely in Chinese, which effectively forces a specific language for users. Under the policy, language constraints should either offer user opt-in/choice or be clearly justified as region-specific, neither of which is present here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: This markdown file presents all instructions and template references exclusively in Chinese, with no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 87% confidence
Finding: This markdown file contains user-facing instructions only in Chinese, and it does not indicate that the skill is region-specific or that users may opt into another language. Under the language/locale policy, forcing a specific language without opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This markdown file is natural-language guidance, and it presents all instructions exclusively in Chinese. Under the policy rule for language or locale constraints, forcing a single language without opt-in or justification can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: This markdown template is entirely written in Chinese and does not indicate that users may select another language or locale. Under the stated policy, forcing a specific language without user opt-in can constitute a natural-language policy violation.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.