Security audit

Tax Digital Localization

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only localization skill with some language-default caveats, but no evidence of unsafe access, hidden behavior, or persistence.

Before installing, confirm your intended target country and language, especially for multilingual markets such as Singapore or Malaysia. Treat tax, invoice, and compliance terminology as draft localization that should be reviewed against your product context and local requirements before release.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (10)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill description is broad enough to trigger on generic localization, i18n, UI translation, and button-label requests that are not specific to tax digitalization. This can cause the agent to route unrelated translation tasks into a domain-specialized skill with fixed terminology and workflow assumptions, increasing the chance of incorrect outputs, silent scope expansion, or misuse of tax-specific guidance in non-tax contexts.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The skill hard-maps countries to a single target language by default, which can override user expectations and produce the wrong locale without explicit confirmation. In multilingual markets such as Singapore or Malaysia, this may lead to incorrect or non-compliant localization, especially for tax and invoice workflows where language precision matters.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: Line L05 states that output should default to German, which is a language/locale constraint expressed in natural language. The policy allows locale constraints only when the user is given a choice or the constraint is clearly documented and justified as region-specific; this file does not provide opt-in language choice.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: Line L05 states that output should default to Italian, which is a natural-language locale policy constraint. The file does not mention any user selection, opt-in, or justification limiting this behavior to a clearly documented region-specific context.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The instruction "默认输出马来语" mandates Malay output by default. Per the policy, forcing a specific language without user opt-in is a natural-language locale policy violation unless the constraint is explicitly justified or optional.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The instruction 默认输出波兰语。 mandates Polish as the default output language. Under the policy, forcing a specific language without user opt-in is a natural-language locale-policy violation unless the constraint is explicitly justified or optional.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: Line L05 states '默认输出英语。' ('Default output English'), which imposes a language preference as a default behavior. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the constraint is explicitly justified or optional, which this file does not provide.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: Line L05 states that output should default to Vietnamese, which is a language/locale constraint expressed in natural language. The policy for this audit flags skills that force a specific language unless the user is given a choice or the restriction is clearly justified as region-specific.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The instruction text is written as a normative policy for handling tax terminology and consistently prescribes Chinese-source interpretation and output conventions, including adding a Chinese note label 注意项：. This effectively imposes a language/locale constraint without any user opt-in or explicit justification that the skill is limited to a Chinese-language or region-specific workflow.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The instruction states that this document constrains translation style relative to Chinese literal translation, establishing a fixed Chinese-language workflow. Because the file does not offer user opt-in or alternative locale handling, it can violate the policy against forcing a specific language or locale.
Content: No source excerpt is available for this finding.