Back to skill

Security audit

化学用语与方程式教练

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent Chinese K12 chemistry tutoring skill with disclosed, consent-gated profile and reminder behavior.

Install this only for the intended Chinese K12 chemistry tutoring context, or localize curriculum, language, emergency contacts, and minor-consent rules before student-facing use in another region. Review the profile and reminder consent settings if enabling cross-session memory.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (6)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The protocol hard-codes crisis referral wording and hotline guidance entirely in Chinese and specifies China-mainland-specific channels, without offering a user language choice or opt-in. This can violate language/locale policy when the skill is used with users in other locales or languages.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

This JSON schema contains natural-language constraints and enumerated values exclusively in Chinese, including user-facing descriptive fields and consent-related values, but does not document that the schema is limited to a Chinese locale or offers any language choice. Under the policy, forcing a specific language without user opt-in or a clearly justified locale scope is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The entire shared guidance is written as mandatory instructional content in Chinese and does not indicate that users may choose another language or locale. Under the policy scope for natural-language violations, forcing a specific language without opt-in is a reportable issue unless the locale restriction is documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
96% confidence
Finding

This markdown skill resource uses Chinese throughout and does not indicate that users may choose another language or locale. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy concern unless the locale restriction is explicitly documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

Natural-language descriptions in the schema are written entirely in Chinese, including the distributable note and field descriptions, with no indication that this is a region-specific artifact or that users may choose another language. The policy requires flagging language or locale constraints when the skill effectively forces a specific language without opt-in or clear justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

The text states that the repository is designed for '中国大陆的中文 K12 场景' and defaults examples, wording, and safety-help channels to mainland China. This is a locale/language constraint in natural language, and while later lines describe how operators should adapt for other regions, the file itself sets a default locale rather than offering end-user choice or opt-in.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.