Security audit

Vulkan 渲染专家

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent Vulkan engineering reference skill with no artifact-backed evidence of hidden execution, data exfiltration, persistence abuse, or destructive behavior.

Install this skill if you want Vulkan-focused engineering guidance and are comfortable with Chinese-oriented reference content. Expect it to activate on Vulkan-related questions and to use local reference files plus user-provided project/debug evidence; do not provide secrets unless independently necessary for your debugging task.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
System Prompt LeakageDirect Leakage, Indirect Extraction, Tool-Based Exfiltration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (176)

Direct Prompt Extraction

High

Category: System Prompt Leakage
Confidence: 85% confidence
Finding: Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.
Content: Scanner excerpt · README_EN.md (reported line 22)May include surrounding context.
text
. ├── SKILL.md # Skill entry: triggers, loading order, and output rules ├── agents/ # Optional tool or platform integration configs ├── assets/ # Image assets used by README and release pages └── references/ # Vulkan expert knowledge base, progressively loaded by task

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The README states that merely describing a Vulkan problem will automatically trigger the skill, which is an overly broad activation model. In multi-skill or mixed-context environments, broad auto-invocation can cause the wrong skill to activate, leading to irrelevant guidance, prompt-context pollution, or unintended exposure of user inputs to a skill that was not explicitly requested.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The README says that simply 'describing a Vulkan problem' triggers the skill automatically, but it does not define boundaries, exclusions, or a narrow activation phrase. For a markdown file, this is an ambiguous activation condition that could cause unintended invocation during normal discussion of Vulkan topics.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill metadata and body strongly prescribe Chinese-language operation without indicating that the assistant should follow the user's language preference. This can override user intent, reduce usability, and in multilingual environments create misleading or inaccessible output, especially for safety-critical debugging where precise communication matters.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The display name, short description, and default prompt are all written exclusively in Chinese, which implies a fixed language/locale for user interaction. The file does not offer a language choice or document that this skill is intentionally region-specific, so it creates a natural-language policy concern under the locale-choice rule.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The display name, description, and default prompt are all written in Chinese and instruct use in that language, with no indication that the user can choose another language. This creates a natural-language policy concern because it imposes a locale/language expectation without explicit opt-in or documented justification.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The document title and all operational instructions are written in Chinese, and the module presents itself as the authoritative entry point for handling Vulkan tasks. There is no indication that users may choose another language or that the Chinese-only behavior is limited to a justified region-specific context.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This markdown file contains policy/instructional content only in Chinese, which can amount to a language-policy violation if the organization expects skills to avoid forcing a specific language without user opt-in. There is no visible indication that Chinese is optional, selectable, or required for a region-specific purpose.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: Lines L03-L25 are written as hard requirements entirely in Chinese and present mandatory behavior using phrases like '不允许' and '必须', which effectively impose a specific language/locale on skill use. The file does not offer user opt-in or an alternative language, and no region-specific justification is stated in the document.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This markdown file contains all substantive instructions in Chinese, and there is no indication that users can opt into another language or that the skill is intentionally restricted to Chinese-speaking users. The policy specifically flags language or locale constraints when a skill forces a specific language without user choice or justification.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The file’s instructional content is written as a normative response-format specification in Chinese, defining required output structures for all task types. There is no indication that users may choose another language or that the locale restriction is justified as a region-specific requirement, which creates a language/locale policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The natural-language instructions are entirely written in Chinese and define the assistant role in Chinese without offering the user a language or locale choice. Under the stated policy, forcing a specific language without user opt-in is a language/locale policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The instruction text is written as mandatory operational guidance in Chinese and does not provide any opt-in or alternative language behavior. Under the stated policy, forcing a specific language without user choice is a natural-language policy violation unless clearly justified as region-specific.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This markdown file contains all operational instructions in Chinese and does not indicate that users may choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The document is entirely written in Chinese and does not state that the skill supports other languages or that Chinese is an intentional, region-specific constraint. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The file title and instructional text are written in Chinese and direct future API cards to use the same template, implying a fixed language requirement. There is no indication that authors may choose another language or that the Chinese-only constraint is required for a region-specific or compliance reason.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The title and content are written entirely in Chinese and present prescriptive guidance for the skill design, but there is no indication that the language requirement is optional or limited to a justified region-specific use case. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The document consistently mandates behavior using Chinese-language instructions and does not indicate that users may choose another language or that the skill is intentionally limited to a Chinese-speaking context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The entire skill guidance is written as mandatory Chinese-language instructions and does not indicate that users may choose another language or locale. Under the policy, forcing a specific language without opt-in is a natural-language policy violation unless clearly documented as region-specific or optional.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The document is written entirely in Chinese and explicitly defines a section of '中文辅助阅读资源', while also directing how sources should be used. Under the policy, language constraints should not be forced without user opt-in or a clearly documented locale-specific justification, and this file does not state that it is intended only for Chinese-speaking users or offer an alternative language choice.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The entire skill content is written in Chinese and does not provide any indication that language choice is optional or that the skill is intentionally limited to a Chinese-speaking audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The document is written entirely in Chinese and does not indicate that language is optional or that alternative locales are available. Under the policy for natural-language violations, forcing a specific language without user opt-in is a locale-policy issue.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: Line L03 instructs the skill to apply the checklist before producing Vulkan design, code, debugging, or optimization output, and the entire checklist is written as mandatory Chinese-language guidance. This creates a language/locale constraint without any user opt-in or documented reason that the skill must operate only in Chinese.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The entire skill file is written in Chinese and presents its guidance exclusively in that language, with no indication that other languages are supported or that the language choice is intentional and optional. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The entire document is written in Chinese, including headings, instructions, and technical guidance, with no indication that language selection is optional or that the content is intentionally limited to a Chinese-speaking audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language locale violation.
Content: No source excerpt is available for this finding.