Back to skill

Security audit

Ruankao Essay Writing | 软考论文写作

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese Ruankao essay-writing aid with no hidden code execution, credential handling, network behavior, or persistence.

Install only if you want Chinese-language Ruankao advanced qualification essay preparation help. Treat it as a study and drafting aid, verify generated content against official exam rules, and be aware that generic essay requests may invoke Ruankao-specific guidance unless you clarify your intent.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (18)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The trigger phrases include very generic requests such as '帮我写论文' and '论文模板', which can match ordinary essay-help requests unrelated to the Ruankao exam domain. This can cause the skill to activate in unintended contexts and provide domain-specific guidance where it does not belong, creating scope confusion and possible misrouting of user data or workflow.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The skill content is written entirely for Chinese essay production and specifies Chinese-character counting logic for output, but it does not explicitly tell users that the skill operates only in Chinese or offer an opt-in language/locale choice. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is clearly documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The entire markdown file is written in Chinese and presents its guidance as the default operating language, with no indication that users may choose another language or locale. Under the policy rule, a skill should not impose a specific language unless it is explicitly optional or justified as region-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all guidance only in Chinese, with no indication that the skill is region-specific or that users may opt into another language, which can violate a policy requiring language choice or explicit justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The document is written entirely in Chinese and presents the scoring guidance as the standard to follow, with no indication that users may opt into another language or locale. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The document title and core instructions are entirely in Chinese and explicitly define the scoring reference for the skill, which can impose a fixed language/locale on users. There is no indication that users may choose another language or that the Chinese-only constraint is optional or justified as region-specific within this file.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The file is entirely written as a reusable skill reference in Chinese and presents itself as the document for the qualification use case, but it does not indicate that Chinese is optional or that users may choose another language. Under the policy, forcing a specific language without opt-in is a natural-language policy concern unless the locale restriction is clearly documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The document is entirely written as Chinese-only instructional content and presents the skill material as-is, with no indication that users may choose another language or locale. Under the policy for natural-language violations, forcing a specific language without user opt-in is reportable.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The file’s title and all instructional content are written exclusively in Chinese, with no indication that users may choose another language or that the skill is intended only for a Chinese-speaking or region-specific context. Under the stated policy, a skill that forces a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
85% confidence
Finding

The text requires use of a specific formal written style and explicitly forbids colloquial forms, presenting this as a mandatory rule rather than a user-selectable preference. Under the policy rule for language/locale choice, this can be treated as forcing a linguistic mode without opt-in or documented justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
94% confidence
Finding

The entire skill document is written only in Chinese, and there is no indication that users may choose another language or that the skill is restricted to a Chinese-language context. Under the language/locale policy rule, this is a natural-language policy concern because it implicitly enforces a specific language without opt-in or justification.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

Line L03 states that 'ruankao-essay-scoring 技能评分时维度二同以此为准', which indicates this file is also intended for a separate scoring skill. The manifest for this skill says it is not applicable to essay scoring, so the documented behavior/scope does not cleanly match the stated writing-only purpose.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

The entire skill reference document is written only in Chinese and gives no indication that users may choose another language or that the skill is intentionally limited to Chinese-language operation. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Low
Category
Not specified by scanner
Confidence
92% confidence
Finding

The manifest says this skill is for essay writing guidance and explicitly excludes scoring, but this document states that the scoring skill also uses the same criteria as a basis. While this file is only documentation, it semantically broadens the artifact's described role beyond pure writing support.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

This markdown file contains natural-language guidance only in Chinese, and there is no indication that users can opt into another language or that the content is intentionally limited to a Chinese-speaking audience. Under the policy rule for language or locale constraints, forcing a specific language without opt-in can be a policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
94% confidence
Finding

This markdown file presents all instructions, examples, and required wording in Chinese only. Under the language/locale policy rule, forcing a single language without user opt-in can be a natural-language policy violation when no choice or justification is provided.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
94% confidence
Finding

This markdown file contains user-facing instructional content exclusively in Chinese, and there is no indication that the skill offers language/locale selection or is explicitly limited to a Chinese-only audience for a documented reason. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

The file presents all instructional content in Chinese and does not indicate that language selection is optional or user-configurable. Under the policy for natural-language issues, a skill that implicitly enforces a specific language without opt-in can be a locale-policy violation unless the regional constraint is clearly documented and justified.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.