Security audit

中国交通规则

Security checks for vulnerabilities and agentic risk

Overview

This is a non-executable Chinese driving-rules knowledge base, with legal, accident, insurance, and safety content that should be treated as reference only.

This skill is suitable as a China driving-rules and exam reference. Before relying on it for real accidents, claims, health eligibility, or legal consequences, verify current rules with local traffic authorities, your insurer, or a qualified professional; in emergencies call the appropriate official services such as 122 for traffic accidents and 120 for medical help.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (15)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The skill is presented entirely as a Chinese-language knowledge base and does not indicate that users may choose another language for responses. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is clearly documented and justified as region-specific; here the skill is China-topic-specific, but the file does not explicitly justify Chinese-only interaction or offer alternatives.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The first-aid section includes actionable emergency-care steps, but it does not clearly warn that the document is not a substitute for professional medical advice and that emergency services should be contacted immediately in serious cases. In an accident-handling skill, users may rely on the guidance under stress, so omitted escalation language can contribute to delayed treatment or improper handling of injuries.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 84% confidence
Finding: This markdown file presents all user-facing guidance exclusively in Chinese, and there is no indication that the skill is limited to Chinese-speaking users or that language selection is optional. Under the policy criteria, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The policy for natural-language violations requires flagging content that forces a specific language or locale without user opt-in. This file begins with and continues in Chinese, but does not disclose that the skill/reference is limited to Chinese-speaking users or provide an alternative language option.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The manifest describes a knowledge base for机动车驾驶证考试（科目一/科目四）and中国道路交通安全法规, with accident-handling consultation as a use case. This file is a detailed operational insurance-claims manual covering insurer hotlines, payout sequencing, claim materials, and代位求偿, which is materially broader than traffic rules/regulations and functions as insurance advisory content.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 82% confidence
Finding: This markdown file is written entirely in Chinese and does not provide any opt-in, alternative language, or indication that the content is intentionally limited to Chinese-speaking users. Under the language/locale policy rule, a skill or reference that effectively forces a single language without user choice can be a policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file contains user-facing instructions exclusively in Chinese, and there is no indication that the skill is region-specific or that users may choose another language. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This markdown file presents all content in Chinese and does not mention that the skill is Chinese-only or offer an alternative language/locale choice. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be a locale-policy issue.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: SQP-3 applies to all file types and covers language or locale policy violations. The title and all instructional content are presented only in Chinese, with no note that the skill is China-specific or that users may choose another language.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The file's natural-language content is entirely in Chinese and does not indicate that the skill is region- or language-specific, nor does it offer users a language option. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The document title and introductory scope are entirely in Chinese and specifically framed around PRC driving rules, with no indication that users may request another language or locale. Under the policy rule, forcing a specific language/locale without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 85% confidence
Finding: The document title and all instructional content are presented exclusively in Chinese, with no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern unless the locale constraint is clearly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This markdown file contains user-facing instructional content exclusively in Chinese, and there is no indication that the skill is limited to a Chinese-speaking or China-specific audience. Under the policy rule, forcing a specific language without user opt-in is a natural-language locale violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 89% confidence
Finding: This markdown file presents all user-facing guidance exclusively in Chinese and provides no indication that the language is optional or region-specific. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The file’s natural-language content is exclusively Chinese from title to disclaimer, and there is no statement that the skill is China-specific or that users may choose another language. Under the policy for natural-language violations, forcing a specific language without opt-in can be a locale/language policy issue.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.