Security audit

跨时空古文对话

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language classical literature tutoring skill with scoped learning-record features and no executable install behavior.

Install this only for the intended Chinese-language K12 classical-literature context. Operators serving other regions should localize crisis resources, consent requirements, and curriculum assumptions before use, and users should review the learning-profile and reminder consent settings.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (9)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 84% confidence
Finding: The skill is presented entirely as a Chinese-only learning experience and its invocation examples, outputs, and operational instructions assume Chinese interaction, but it does not explicitly offer the user a language choice or state that use of Chinese is an opt-in requirement. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is clearly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This markdown file is entirely written as a Chinese-only skill definition and states it is the authoritative dimension file for several skills. Under the policy rule, forcing a specific language or locale without user opt-in is a natural-language policy concern unless the constraint is explicitly documented and justified as region-specific; that justification is not provided here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 79% confidence
Finding: The schema explicitly ties this file to the "xiaozhi-chinese-classical-revival" skill and all user-facing descriptions are written only in Chinese. Under the policy, forcing a specific language or locale without offering user choice or documenting a justified locale constraint can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 87% confidence
Finding: The title, notes, and descriptions are written exclusively in Chinese, and the schema is distributed specifically to a Chinese-language skill variant. For a shared schema file, this constitutes a natural-language locale constraint unless the file explicitly offers language choice or documents why Chinese-only content is required.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 87% confidence
Finding: The document is entirely written as normative Chinese instructions for skill behavior and does not offer any user language selection or opt-in. Under the policy rule for natural-language violations, forcing a specific language or locale without user choice can be a language-policy issue unless clearly justified as region-specific.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The document states the library is designed for Mainland China Chinese K12 scenarios, with simplified Chinese wording and China-specific safety help channels as defaults. This is a natural-language locale policy constraint that applies broadly unless the operator localizes first, but it does not present an end-user choice or opt-in mechanism.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 84% confidence
Finding: The document defines the repository-wide vocabulary entirely in Chinese and states it is the single source of truth that all SKILL.md, references, and schemas must follow. This imposes a specific language standard across the skill set without any opt-in, alternative locale, or justification that the repository is intentionally Chinese-only or region-specific.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 89% confidence
Finding: This reference file presents all instructions, examples, and expected interaction patterns exclusively in Chinese, including required response phrasing for the skill. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is clearly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This markdown file presents all instructions and content exclusively in Chinese and does not indicate that the user can choose another language. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.