Back to skill

Security audit

Zeh Hello Community

Security checks for vulnerabilities and agentic risk

Overview

This skill appears to be a simple Chinese notice generator with no hidden data access, persistence, or privileged behavior.

Install this if you want short formal Chinese notices for community or public-service contexts. Be aware that it is intentionally Chinese-focused and uses a fixed notice structure, so it is not a general multilingual notice-writing skill.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The instruction "Reply in Chinese" imposes a fixed language requirement. Under the policy, forcing a specific language is a violation unless the user is given a language choice or the locale restriction is clearly justified and documented.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The script emits all user-facing labels and guidance in Chinese, including the title, audience, body, and notice text. This imposes a specific language/locale without offering opt-in, selection, or documenting that the skill is intentionally region-specific.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.