Security audit

化学错误DNA

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Chinese K12 chemistry learning-analysis skill with scoped profile use, consent controls, and no executable install behavior.

Install only for the intended Chinese K12 chemistry-learning context, or localize language, curriculum, crisis contacts, and minor-consent rules before using elsewhere. Users should be comfortable enabling an optional learning profile and cross-skill sharing for chemistry weak-point tracking and reminders.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (6)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 84% confidence
Finding: The protocol is written entirely in Chinese and repeatedly hard-codes China-mainland specific guidance, including instructions to provide 110/120 only after confirming the user is in mainland China. Under the policy, forcing a specific language or locale without user opt-in is a natural-language policy concern unless the regional constraint is explicitly justified as a region-specific deployment requirement for the skill itself.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 86% confidence
Finding: This JSON schema contains natural-language descriptions entirely in Chinese and also constrains multiple user-facing enum values to Chinese-only strings. Because the file provides no opt-in, alternative locale, or documented region-specific justification, it appears to impose a specific language/locale policy on all consumers of the schema.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The schema includes natural-language instructions entirely in Chinese in the x-skill-scope note, which imposes a fixed language on consumers of the skill metadata. Under the policy, locale constraints should either be optional/opt-in or clearly documented as a justified region-specific requirement; this file does neither.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 86% confidence
Finding: The top-level description is presented only in Chinese, and the file continues this pattern across user-facing descriptions. Because this is a shared protocol schema rather than an obviously region-scoped compliance artifact, the fixed-language choice appears to violate the language/locale policy.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: This file’s natural-language instructions are entirely in Chinese, and it does not indicate that the skill is China-specific or that users can opt into another language. Under the policy rule for language/locale, forcing a single language without opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The document states that the library is designed for Mainland China Chinese K12 scenarios, with simplified Chinese wording and Mainland China default safety channels. This is a natural-language locale policy constraint that applies broadly, but the file does not present it as a user choice or opt-in at the point of use.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.