Security audit

中文学术论文写作助手

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only Chinese academic writing helper with disclosed citation and drafting guidance, and no evidence of hidden execution, persistence, credential access, or data exfiltration.

Install this when you want help drafting or formatting Chinese academic papers. Be aware that it may activate for broad academic-writing requests and that its defaults favor Chinese academic style and the bundled citation conventions; provide a different target style or language explicitly when needed.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (7)

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The trigger conditions are very broad and can activate this skill for many generic academic-help requests, causing it to overshadow more specialized or safer skills and potentially route users into an unintended workflow. In an agent environment, overbroad routing can produce incorrect assistance, unnecessary tool chaining, or policy mismatches even if the skill itself is not overtly malicious.

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: The instruction “使用规范的学术中文” imposes a fixed language policy on all outputs. Under the policy criteria, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified or the user is offered a choice.

Natural-Language Policy Violations

Medium

Confidence: 84% confidence
Finding: The text states that the citation format applies to Chinese academic writing, which imposes a specific language/locale convention. Under the policy, forcing a language or locale without explicit user opt-in or a clearly documented justified regional scope can be a natural-language policy issue.

Natural-Language Policy Violations

Medium

Confidence: 79% confidence
Finding: These lines prescribe mandatory language/locale formatting behavior, including Chinese-first ordering and punctuation handling. Because the file does not clearly frame these constraints as venue-specific requirements or offer alternatives, this can be read as forcing a locale-specific output policy.

Natural-Language Policy Violations

Low

Confidence: 87% confidence
Finding: The entire guide is written in Chinese and does not indicate that users may request another language or locale. Under the policy provided, forcing a specific language without user opt-in can be a natural-language policy violation unless the constraint is clearly documented and justified.

Natural-Language Policy Violations

Low

Confidence: 90% confidence
Finding: The section titled '學術中文要點' instructs users to write in academic Chinese and forbids alternative colloquial forms, but it does not indicate that language choice is optional or limited to a specific regional/compliance context. This is a natural-language locale policy concern because it imposes a specific language/register without explicit user opt-in.

Natural-Language Policy Violations

Low

Confidence: 94% confidence
Finding: This markdown file contains instructional content exclusively in Chinese, including the title and all guidance sections, but does not indicate that the skill is intended only for Chinese-speaking users or provide an opt-in language choice. Under the policy rule for natural-language violations, forcing a specific language without user choice can be a locale-policy issue.

Static analysis

No suspicious patterns detected.