纯水工艺专员

• Outcome: Pass
• Latest audit: Aug 25, 2026 · 8:03 AM UTC
• Version: 1.0.0

Overview

This is a coherent water-treatment advisory skill with no executable behavior, hidden data access, or persistence found.

Install only if you want a Chinese/English pure-water engineering assistant. Its advice may affect industrial, electronics, or pharmaceutical water systems, so verify designs, standards, and safety-critical decisions with qualified engineers and current regulations.

SkillSpector

Vulnerability Patterns

• Memory Poisoning: Persistent Context Injection, Context Window Stuffing, Memory Manipulation
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (31)

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

�N,����O(u�N�~d��v���e0�N�~d��v���eN,��^	gN�~d��v���e�N,�:N�Sn�ňn	�:NMR�~��Y0�N�~d��v��Y�S�N/f�m�^�yP[�NbchV(MB-IX)
0�Sn���Y(RO-2)
0ޏ�~5ud��v��Y(EDI)0
�Sn�+�m�^�]z�� �m�^���x��x�Qu
��d\O
YBg
�	gal4l�c>e�
�FO/f��Yb,g��NO0O(uN�~�Sn��T�m�^�]z�}�6q��Y�bD���NO
�FOvQЏL�b,g��ؚ0

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

�Ǒ(u�V�Q�R�]�~ň�vb__0
2.4;N�]z�Am
z�v����
8^ĉ�v�yP[�Nbc4lYt�]z��[�N�S4lTDS>400ppm�v4lYt�]
z
�=\�{vQ
Rg�bD�NO

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

�N�Qux��x�^�m�c>eϑ'Y
� �b�s�Xal�g0(W,g�]
zy��v-NblQ�S�cP�	�(uEDI��Y
���|�~ЏL�9�(uNO
0f�N�[�sꁨRS0NO�^�vЏL�b,g��Y(W�|�~�bЏT1t^�]�Se�P�V
Rg�bD��vؚ�Q�R
�EDI4lYt�|�~wQ	g�_}Y�v�~Nm'`�T�s�XHe�v0 :N�O��sQ.���Y�Sn�ňn�v�g�S`�3z�[ЏL�
�R�_{���n��Yt�|�~

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

									  			 @g̃�Ro��|�~ �!�! �Sm/nm:g�~
�S4l�{ �! �S4l�X�S�l �! �p�NbchV �! �|�[Ǐ�nhV �! ���n:g�~ �! ���n�N4l�{ �! ;��W�Ro��|�~ �! �S�~�Sn�:g�~ �! RO�~4l�{ �! CEDI�~4l�l �! CEDI:g�~ �! ���~4l�{ �! ���~4l�X�S�l �! 8h�~�|�m�^ �! UV@g̃ň
�!�_�s�V4l�!
n �! �~�zǏ�nhV �! u�N�~24m3/hr
�����]z�Am
z�V	�

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

---IEC439-1			
0NO�SbWY_sQ��Y�T�c6R��Y
0
---GB7251				
0NO�SbWY_sQ��Y
0
---DL/T620-1997		

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

0
---DL/T621-1997		
0�NAm5ulňn�v�c0W
0
---GB4720-84			
0NO�S5uhV5u�c��Y
0

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

CJOJPJQJo(

h?�5�@�
CJOJQJo(
h?�5�@�
CJh?�5�CJo(
h?�5�CJOJPJo(
h�fh�f5�CJPJo(
h�fh�f5�CJPJh?�5�CJPJo(

h?�CJ
o(
	h?�o(

h?�5�CJ :epe�e�e<f�f�f�f(grg�g�g hTh�h�hvi����������������$��
dh

G$H$^��
a$$��
dh

G$H$`��
a$$��
dh

G$H$^��
a$$��
dh

G$H$`��
a$$��
�
dh

G$H$^��
`�
a$

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

&
Fdh

G$H$$��
�
dh

G$H$^��
`�
a$dh

G$H$
�
����[�dh

G$H$^��`�[�
��
dh

G$H$`��
����dh

G$H$VD�WD
^��`��
�V:g�h�]
z^OSO�ASME	��T��VPg�e�[��f[O�ASTM	��v�]N�lĉ-N�����vh�Qb�vS_h�Q

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

Ǐ�n�e_:NY�S_
��S�QmHe�g�f>fW�0
����N���XR�y�~ň
��h�O�~�b�e�O
�ЏL�N�fbc9�(u��NO0
M�nN�S�Sm/nm�l�TN*N2000L�v�Qm4l�{
��O�Qmbnm�eO(u0

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

ؚ�S�lۏ�SňNO�S�O�b_sQ�ۏ�S�N�T	�
��S�RNO�e�bf��S\P�l0
ؚ�S�l�SD��N�vPg�eǑ(u
N���0
�[
\�e_�Q��P���:g�h�[
\0
3.3.6�Sn�ňn
ROňn�v��nR+R:NNWY$N�~Y�k_

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

0ĉ�[�vg'Y�ϑ<P
�v^	��bTt�v�����ϑ
��O����CQ�Nck8^ЏL��TTt�vnmhTg0
�Sn�ňnSf[nm�m�v	��b9hncal�g�`�Q�T@b	�(u�Sn�ňn���~�N�vyr'`nx�[0b�e\�N�N�NO(u�e�c�Onm@b�o��T�y{|�T	�(u�f0
ROňnT�k�~4l�SSm4lۏ�Q4l�{
N��	gNnm�mۏ�Q�{�vޏ�v�c�S�S��
��N�Onm�e���0

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

�/e�g
NM�YhQ萡{S��S�c4Y
�؏S�b@b	g�v/e�g
0'}�V�N
09YwQ�SvQ�[D��N0
RO�~T�g�v�����n��vQ�S@W�v�b��p�^��Bl�T�~�N�v������Bl0
blQ�S\�c�ORO�|�~�v�������{�e�N0
RO�|�~@bM��NhV
0�Nh��v'`��
0M�n�p�SpeϑI{\�n��,g�|�~�v�[hQ
03z�[
0�S`�ЏL�KN���0
3.3.7 ROSf[nm�|�~

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

nm�|�~�vPg(��^���(u�N@b(u�vnm�m0
3.3.8 CEDI�|�~
Ǒ(u!jWW����
�US*N!jWWh�Q�Nϑ:N�3.3(T/\�e0
�|�~�Q4l4l(�10~17M��cm
�
T�e��	g�Q4l4l(���h�bf�ňn0

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

��S�r�z�[US*N��WW�v�c0
3.3.98h�~�m�^�yP[�Nbc
�yP[�NbcPSO:NFRP �~�~�g�v�gb_�[hV
���Y	ch�QۏL�����
06R ��T�h��0
��Y,gSO�Q�l�	gFRP�Qƀ
�al�girʑ>e�sNO0@b	g�Ql�/f�[te�v
0�e�NUOo�p
�v^ۏL�6~9bar��SKmՋ0

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

�al�girʑ>e�sNO0@b	g�Ql�/f�[te�v
0�e�NUOo�p
�v^ۏL�6~9bar��SKmՋ0
8h�~�m�^ň��M�4lňn
0Ɩ4lňn
0ۏ�Q4lňn�TvQ�[@b	g�_���vD��N0
�m�^�Q�vM�4l�TƖ4lňn
��O��te*N�n�eB\4lAmGWS
�2�bkOPAm0�^�Ɩ4lňn:N*r_�~�g0
�k�S��Yۏ�Q�S�{S���	gKb�R���y��T;m�c4Y

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

�Oؚ�S�leQ�S�v4l�SNO�N�gN���[<P�e
�ꁨR�S�Q�O�S\Pbkؚ�S�l
��O�bؚ�S�l
N(Wzzl��`�Q
NЏL�0S_�VvQ�[�v�S�Vb��d\O
�Oؚ�S�l�v�Q�S�S�R��Ǐ�g���[<P�e
�ꁨR�S�Q�O�S\Pbkؚ�S�l

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

�(W1\0W�v
N�S���QRO�v	gsQ�]z��Spe
��N�S��(W1\0W�d\O�v
NKb�R/T\PROۏ4lؚ�S�l�S�vsQ�vꁨR��0
5.2.3ؚ�S�l�v�O�b�|�~
ROňn�vؚ�S�lۏ�Q�Sň	gNO�S�Tؚ�S�O�b_sQ0S_�O4lϑ
N��Oؚ�S�leQ�S�v4l�SNO�N�gN���[<P�ck8^:N0.1Mpa	�

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

HITECH
 lQ�S�N�T0
T�e؏S�b�vsQ5ulCQ�N�~b�v�c6R�gI{Y�V���R��Y0
5.3.2o��N
�c6R�|�~o��N�~b:N�
PLC�^(uo��N�ЏL��NPLC
��[�sT�y�c6R�R��0

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

T{|�l�v�Q�SGW��	g�S�Rh�0
EDIۏ�Q�S��	gGW��	g�S�Rh�0
--vQ�[Km�p�
���n�Q4l�k�{��YuKb�RSDIKmՋ�N�c�S0
N�~ROۏ4lň	g)n�^c:y
��N�~ROۏ4lň	gpHh�c:y0
5.6�|�~�v�d\O�e_

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

T{|�l�v�Q�SGW��	g�S�Rh�0
EDIۏ�Q�S��	gGW��	g�S�Rh�0
--vQ�[Km�p�
���n�Q4l�k�{��YuKb�RSDIKmՋ�N�c�S0
N�~ROۏ4lň	g)n�^c:y
��N�~ROۏ4lň	gpHh�c:y0
5.6�|�~�v�d\O�e_

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

5.6.1 ���n:g�~
ЏL�
0�Sm�TckmI{
z�^�ǏPLCꁨR�d\O�[b
�_N�S�N1\0WKb�R�c6R��0
5.6.2 �Sn�:g�~
,gSO��	g�c6R�gN�Nh��v
�sS�S(W1\0W�c6R�g

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

5.6.2 �Sn�:g�~
,gSO��	g�c6R�gN�Nh��v
�sS�S(W1\0W�c6R�g
N�d\O
�_N�S�ǏPLCۏL�
z�c�d\O0
5.6.34l�lI{vQ�N��Y

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

5.6.2 �Sn�:g�~
,gSO��	g�c6R�gN�Nh��v
�sS�S(W1\0W�c6R�g
N�d\O
�_N�S�ǏPLCۏL�
z�c�d\O0
5.6.34l�lI{vQ�N��Y

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

5.6.2 �Sn�:g�~
,gSO��	g�c6R�gN�Nh��v
�sS�S(W1\0W�c6R�g
N�d\O
�_N�S�ǏPLCۏL�
z�c�d\O0
5.6.34l�lI{vQ�N��Y

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

5.6.2 �Sn�:g�~
,gSO��	g�c6R�gN�Nh��v
�sS�S(W1\0W�c6R�g
N�d\O
�_N�S�ǏPLCۏL�
z�c�d\O0
5.6.34l�lI{vQ�N��Y

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Static analysis

No suspicious patterns detected.