e Crm Autom

• Outcome: Pass
• Latest audit: Sep 11, 2026 · 4:59 AM UTC
• Version: 1.0.1

Overview

This is a Chinese-language toy simulation for “logging into space” with no evidence of hidden network access, persistence, credential use, or destructive behavior.

Install only if you are comfortable with Chinese-language docs and a toy simulation. It does not perform real space, authentication, or API operations, and there is no evidence it persists data or sends information externally.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (7)

Natural-Language Policy Violations

Medium

• Confidence: 89% confidence
• Finding: This markdown file presents all user-facing instructions, setup steps, API usage, and warnings exclusively in Chinese. Under the policy rule for language/locale, forcing a single language without offering the user a choice or documenting a justified regional constraint is a natural-language policy violation.

Ae4

Medium

• Category: analysis-evasion
• Confidence: 80% confidence
• Finding: Suspicious Unicode normalization or mixed-script content

Natural-Language Policy Violations

Medium

• Confidence: 96% confidence
• Finding: The docstring, comments, and all user-facing print strings are in Chinese throughout the file. Under the policy rule, a skill should not impose a specific language on users unless it provides opt-in/choice or clearly states a justified locale-specific scope.

Ae4

Medium

• Category: analysis-evasion
• Confidence: 80% confidence
• Finding: Suspicious Unicode normalization or mixed-script content

Intent-Code Divergence

Medium

• Confidence: 94% confidence
• Finding: The module docstring says this is a 'space login system' whose function is to 'implement login to space', and the class/method names reinforce an authentication-style intent. However, the implementation performs destination validation, launch countdown, travel metadata generation, and stateful location tracking, which is a travel simulation rather than any recognizable login/authentication flow.

Natural-Language Policy Violations

Low

• Confidence: 93% confidence
• Finding: This JSON config contains multiple user-facing/default values in Chinese, including the space center and emergency contact fields. Because the file does not indicate that the skill is region-specific or provide any user opt-in or locale choice, it may violate the policy against forcing a specific language or locale.

Natural-Language Policy Violations

Low

• Confidence: 94% confidence
• Finding: The module title, docstrings, CLI description, and user-facing guidance are entirely in Chinese, which imposes a specific language/locale on users. The file does not indicate that Chinese is optional or that users can select another language, so it matches the language-choice policy concern.

Static analysis

No suspicious patterns detected.