Back to skill

Security audit

学科专家生成

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown-only educational skill for generating subject-specific learning assistants, with no evidence of hidden code execution, credential access, persistence, or data exfiltration.

This skill appears safe to install for educational planning. Users should note that it is written for Chinese-language use and should treat chemistry, medical, engineering, agricultural, and other practical or professional topics as study guidance only, not as instructions to perform hazardous activities or make professional decisions without qualified supervision.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (19)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The manifest description is written as an instruction in Chinese and presents the skill as generating a learning assistant in that language context, but nowhere in the file does it offer a language/locale choice or state that output language should follow user preference. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The file presents the assistant role template entirely in Chinese and frames the role behavior in that language, but it does not indicate that language selection is optional or user-driven. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern unless the locale restriction is explicitly justified.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

This markdown file includes experimental operations such as reagent handling, instrument use, gas preparation, synthesis, and analysis. For markdown files, SQP-2 applies when descriptions omit warnings about behaviors that could affect user safety or system integrity, and this section provides no caution about supervision, protective equipment, or safe lab practice.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

This markdown file presents all instructional content exclusively in Chinese, and there is no natural-language indication that users may choose another language or that the skill is intentionally limited to a Chinese-language audience. Under the policy, forcing a specific language without user opt-in can be a locale-policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

This markdown file is entirely presented in Chinese and provides no indication that users may choose another language or that the Chinese-only presentation is required for a specific regional or compliance reason. Under the natural-language policy rule, forcing a specific language without user opt-in can be a locale policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

This markdown file presents the skill exclusively in Chinese from the title through all instructional content, with no indication that users may select another language or that the skill is intentionally restricted to Chinese-speaking contexts. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

This markdown file contains only Chinese-language headings and instructional content, which effectively forces a specific language for users. Under the policy, language constraints should either provide user opt-in/choice or be clearly documented as justified for a specific locale or audience.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

This markdown file presents all instructional content in a single language and does not indicate that the user can choose another language or that the skill is intentionally restricted to Chinese-speaking users. Under the policy rule for language or locale constraints, forcing one language without opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

SQP-3 applies to all file types and includes language or locale policy violations. This file presents its title and all instructional content in a fixed language with no user opt-in, alternative locale, or justification that the skill is region-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

This markdown file presents all instructional content in a single language and does not mention any user opt-in, multilingual support, or region-specific constraint. Under the language/locale policy rule, forcing a specific language without user choice can be a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file presents all instructional content in Chinese, and there is no natural-language notice offering an alternative language or stating that the skill is intentionally region- or language-specific. Under the policy rule for language or locale constraints, forcing a specific language without opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

该 markdown 文件从标题到全部正文均强制使用中文表述,且没有说明这是面向特定中文用户群体的限定内容,也没有提供其他语言或用户选择机制。按规则,未获用户选择或缺乏明确正当说明的语言/区域限定,属于自然语言层面的策略问题。

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

This markdown file uses a single fixed language from the title onward, and nowhere indicates that users may choose another language or that the Chinese-only presentation is a justified locale constraint. Under the policy rule for natural-language violations, forcing a specific language without user opt-in is reportable.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
86% confidence
Finding

This markdown file presents all headings and instructional content exclusively in Chinese, which can amount to a language/locale policy issue when no user opt-in or justification is provided. The file does not indicate that it is intended only for Chinese-speaking users or offer an alternative language option.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
92% confidence
Finding

This markdown file is entirely written in Chinese and does not provide any user opt-in, alternative language option, or explanation that the skill is intended only for a Chinese-language audience. Under the policy rule for language or locale constraints, forcing a specific language without user choice is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file presents all instructional content in a single language and does not mention that Chinese is optional or intended for a specific locale. Under the language/locale policy, forcing one language without user choice can be a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
79% confidence
Finding

The entire skill content is written in Chinese and does not indicate that language selection is optional or limited to a Chinese-speaking context. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

The entire skill file is written in Chinese and presents its instructional content only in that language, with no indication that users may choose another language or locale. Under the stated policy, a skill that forces a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
96% confidence
Finding

The entire skill file is written in Chinese and does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the policy, a fixed language/locale without opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.