Security audit

China Classics中国古经典

Security checks for vulnerabilities and agentic risk

Overview

This is a content-only Chinese classics reference skill with no code execution, persistence, credential use, or hidden data access.

Expect this skill to answer primarily from Chinese-language classical literature references. For modern life or workplace advice, treat its output as cultural interpretation rather than professional, legal, medical, financial, or management guidance.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (16)

Natural-Language Policy Violations

Medium

Confidence: 88% confidence
Finding: The skill description is entirely in Chinese and presents the capability as a Chinese-only knowledge resource, but it does not state that users may choose another language for responses. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern unless the locale restriction is explicitly documented and justified.

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The skill declares very broad trigger conditions such as any knowledge query, modern application advice, and learning guidance without defining exclusion criteria or precedence rules. In a multi-skill environment, this can cause inappropriate routing, overshadow more suitable skills, and lead the agent to answer outside the intended domain, increasing the chance of unsafe or misleading responses.

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: The description is entirely in Chinese and presents the skill as a Chinese-classics knowledge base, but it does not state that Chinese is optional or that users may request another language. This can amount to a language/locale policy issue because it implicitly forces a specific language without user opt-in.

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The trigger guidance is very broad and includes generic categories like knowledge queries, modern applications, and study guidance, which can cause the skill to activate for many ordinary conversations outside a narrowly scoped classics-reference use case. Over-broad activation increases the chance of inappropriate routing, policy bypass of a better-suited skill, or delivery of authoritative-sounding domain content where the user did not ask for it.

Vague Triggers

Medium

Confidence: 90% confidence
Finding: Several trigger categories, such as workplace wisdom, interpersonal relationships, personal growth, social governance, and life philosophy, are framed so generally that they can match routine advice-seeking rather than classics-specific questions. This creates scope creep: the skill may respond as if classical authority applies to broad modern advice domains without the user intending to invoke this specialized skill.

Natural-Language Policy Violations

Medium

Confidence: 88% confidence
Finding: This markdown file presents all feature descriptions exclusively in Chinese, and there is no indication that users can opt into another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the language/locale policy, forcing a specific language without user choice can be a natural-language policy violation.

Natural-Language Policy Violations

Medium

Confidence: 96% confidence
Finding: The file consists entirely of Chinese-language instructional/content text beginning with the title "中国历史年表," and nowhere indicates that language selection is optional. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation unless the constraint is explicitly justified.

Natural-Language Policy Violations

Low

Confidence: 84% confidence
Finding: The file explicitly advertises "现代汉语翻译" as the translation mode, which suggests a fixed language choice for output. Because no alternative language option or opt-in mechanism is mentioned nearby, the skill appears to default to a single language policy.

Natural-Language Policy Violations

Low

Confidence: 92% confidence
Finding: This markdown file presents all content exclusively in Chinese, beginning with the title and continuing throughout the document. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be a locale-policy issue when no alternative or choice is offered.

Natural-Language Policy Violations

Low

Confidence: 82% confidence
Finding: This markdown file presents all instructional/content text exclusively in Chinese and does not indicate any optional language selection or justified region-specific scope. Under the stated policy, a skill that forces a specific language without user opt-in can be a natural-language policy violation.

Natural-Language Policy Violations

Low

Confidence: 93% confidence
Finding: This markdown file is entirely written in Chinese and does not indicate that the user can choose another language or that the content is intentionally limited to a Chinese-language audience. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Natural-Language Policy Violations

Low

Confidence: 88% confidence
Finding: This markdown file presents all skill content in a single fixed language, Chinese, without indicating that the user can choose another language or that the locale restriction is intentional. Under the language/locale policy criterion, forcing a specific language without user opt-in can be a natural-language policy violation.

Natural-Language Policy Violations

Low

Confidence: 93% confidence
Finding: This markdown file presents all user-facing content exclusively in Chinese and does not indicate that the skill is intended only for Chinese-speaking users or offer any language/locale choice. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.

Natural-Language Policy Violations

Low

Confidence: 84% confidence
Finding: The entire skill content is presented only in Simplified Chinese and does not indicate that users may request another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern unless the locale restriction is documented and justified.

Natural-Language Policy Violations

Low

Confidence: 84% confidence
Finding: This markdown file presents all instructions and reference content exclusively in Chinese, with no indication that users can choose another language or that the skill is intentionally limited to Chinese-language use. Under the policy criteria, forcing a specific language without user opt-in can be a natural-language policy violation.

Natural-Language Policy Violations

Low

Confidence: 92% confidence
Finding: This markdown file presents all content in a single language and does not indicate that Chinese is an intentional locale-specific requirement or provide users any language/locale option. Under the policy rule for natural-language violations, forcing a specific language without opt-in can be a compliance issue.

Static analysis

No suspicious patterns detected.