Security audit

AutoCLI zh

Security checks for vulnerabilities and agentic risk

Overview

This Chinese AutoCLI skill is a disclosed command guide for using supported sites and apps, with consent gates for browser-session debugging, persistent adapter changes, and write actions.

Before installing, understand that this skill encourages using AutoCLI against logged-in browser sessions for some sites. Use it when you are comfortable letting AutoCLI read the requested account-backed pages, and review any prompt carefully before approving write actions or persistent changes under ~/.autocli.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (12)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: L170 明确规定“用简体中文汇报结果”，这是语言/locale 约束。文档中没有提供用户选择语言的选项，也没有说明这是仅面向特定地区或合规场景的必要限制，因此符合自然语言政策中的语言强制问题。
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The file's operational instructions are presented in Chinese, which effectively forces a specific language for users consuming this skill reference. The policy allows locale constraints only when users are given a choice or when the constraint is explicitly documented and justified, neither of which appears here.
Content: No source excerpt is available for this finding.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · guides/custom-adapters-reference.md (reported line 27)May include surrounding context.
${{ item.score > 10 }} ${{ item.active ? 'yes' : 'no' }} ${{ item.title | truncate(30) }} https://api.com/${{ item.id }}.json ${{ item.subtitle || 'N/A' }} ${{ Math.min(args.limit, 50) }}

text

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The document's operative instructions are written in Chinese and do not indicate that the user can choose another language or locale. This creates a natural-language policy concern because it effectively imposes a specific language without opt-in or documented justification.
Content: No source excerpt is available for this finding.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · guides/custom-adapters.md (reported line 70)May include surrounding context.
md
columns: [rank, title, score] pipeline: - fetch: https://api.mysite.com/hot - select: data.posts - map: rank: "${{ index + 1 }}"

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This markdown file contains operational instructions only in Chinese, which can amount to a language-policy violation if users or operators are not given an explicit choice of locale. The file does not indicate that the Chinese-only constraint is optional, user-selected, or justified by a region-specific requirement.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: Line L03 instructs authors in Chinese to use this file when writing new reference cards, and the rest of the document consistently mandates Chinese-language content patterns. This is a natural-language policy concern because it imposes a specific language without any documented user opt-in or justified locale-specific scope.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This markdown file presents all user-facing instructions and warnings exclusively in Chinese, which can amount to a language-policy violation if users are not given an opt-in or alternative locale. The file does not state that the skill is intentionally region-specific or provide any language choice.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This markdown file presents all usage instructions and notes in Chinese, and there is no indication that the user can choose another language or that the locale is intentionally restricted. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This markdown file presents all user-facing guidance in Chinese, including headings and operational instructions, with no indication that the skill is Chinese-only or that users can opt into another language. Under the policy for natural-language violations, forcing a specific language without user choice can be a locale-policy issue.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The instructional content and headings are presented in Chinese throughout the file, with no indication that the user can choose another language or that the skill is intended only for a Chinese-speaking context. This creates a natural-language locale constraint that is not opt-in and is not explicitly justified in the document.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 80% confidence
Finding: The document is written primarily in Chinese and presents usage guidance from a Chinese-language default perspective, including advice to switch to English only if Chinese results are inadequate. This can be interpreted as a locale preference without explicit user opt-in or a stated regional justification.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.