Back to skill

Security audit

info-security-expert

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed, advisory-only Chinese information-security consulting skill with no executable code or hidden access behavior.

Install this if you want Chinese-language enterprise security consulting templates and guidance. Treat incident-response, vulnerability, and compliance advice as advisory and have authorized security staff review high-impact actions before applying them in real systems.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (11)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The README is entirely written in Chinese and presents the skill persona and usage without indicating that other languages are supported or that Chinese is an optional preference. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
87% confidence
Finding

The skill description and persona are entirely specified in Chinese and include stylistic instructions oriented to Chinese-language output, but there is no indication that users may choose another language. This can violate language/locale policy when a skill imposes a specific language without user opt-in or a documented regional justification.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The skill advertises itself as suitable for essentially all enterprise information security scenarios, which creates an overly broad invocation scope and increases the chance it will be selected for tasks beyond its actual guardrails or validated expertise. In an agentic environment, broad routing language can cause over-delegation to this skill for sensitive security decisions, leading to misleading guidance, unsafe actions, or policy bypass through misplaced trust.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
86% confidence
Finding

This markdown file is entirely presented in Chinese beginning with the title, and nowhere indicates that language selection is optional or that the skill is intentionally limited to a Chinese-speaking or China-specific audience. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
86% confidence
Finding

This markdown file is entirely written in Chinese and the title immediately establishes a single-language presentation with no indication that other languages are supported or that the locale restriction is intentional. Under the policy rule, forcing a specific language without user opt-in or documented regional justification is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The document is written as prescriptive guidance for speaking style and behavior entirely in Chinese, including directives such as "说话风格" and multiple imperative rules about how to communicate. There is no indication that the user can choose another language or that the Chinese-only constraint is required for a region-specific or compliance-specific purpose, which creates a language/locale policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

This markdown file is entirely written in Chinese and does not indicate that users may choose another language or that the content is intentionally limited to a Chinese-language or region-specific audience. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

This markdown file contains only Chinese-language content and does not indicate that the user can select another language. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be a locale-policy issue.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

This markdown file is entirely written in Chinese and does not state that the skill or document is intended only for Chinese-speaking users or a China-specific compliance context. Under the language/locale policy rule, forcing a specific language without opt-in or justification can be a natural-language policy issue.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

This markdown file is entirely presented in Chinese and the title at L001 immediately establishes a single-language experience. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be an issue when no alternative language option or locale justification is provided anywhere in the file.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

The document title and all instructional content are presented only in Chinese, with no indication that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking context. Under the policy rule, forcing a specific language without opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.