Back to skill

Security audit

高级废水处理工程师

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent wastewater-treatment reference skill with no hidden execution, persistence, credential access, or exfiltration behavior, though users should treat its chemical/process guidance as professional reference material rather than site-ready operating instructions.

Install only if you want a Chinese-oriented wastewater-treatment reference assistant. Treat design parameters, chemical dosing ranges, and troubleshooting suggestions as preliminary engineering guidance, not direct operating orders; verify them against current standards, site permits, SDS, and qualified process-safety review.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (8)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The README presents the skill’s purpose, features, examples, and installation instructions only in Chinese. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly documented and justified, which is not present here.

Content

No source excerpt is available for this finding.

Ae4

Medium
Category
analysis-evasion
Confidence
80% confidence
Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The manifest description and top-level instructions are entirely in Chinese and direct the expert to answer using this skill content, but nowhere provide an option for the user's preferred language or explain that the skill is intended only for a Chinese-speaking or China-specific workflow. This creates a natural-language locale policy concern because the skill effectively defaults to a specific language without opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

This markdown skill includes its operational instructions and output requirements only in Chinese, while the manifest itself is bilingual. That can amount to a language-policy issue because the skill implicitly forces Chinese for users who invoke it, without opt-in or a documented region-specific justification.

Content

No source excerpt is available for this finding.

Ae4

Medium
Category
analysis-evasion
Confidence
80% confidence
Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The skill provides operational guidance for hazardous oxidants and chemicals such as ozone, hydrogen peroxide, methanol, and Fenton reagents with dosing ranges and process parameters, but it lacks explicit safety warnings, PPE requirements, incompatibility notes, ventilation guidance, or instruction to defer to SDS and site procedures. In a wastewater-treatment skill, this is contextually relevant, but the absence of guardrails could lead users to apply dangerous chemical handling advice directly in real operations.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The troubleshooting table recommends '投加消毒剂' to address sludge bulking without specifying chemical type, dosing limits, process side effects, or worker/environmental safety precautions. That creates a meaningful risk of improper biocide use, upset of biological treatment, toxic gas generation depending on chemistry, permit violations, and direct operator harm if users treat it as actionable operating advice.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill description and instructions are written entirely in Chinese and present the skill as a general expert package, but they do not state that Chinese is optional or that the skill is intended only for a Chinese-speaking or China-specific user base. Under the language/locale policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.