Security audit

英语语法突破教练

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language English grammar tutoring skill with consent-gated learning records and no hidden code execution or deceptive behavior found.

Use this skill when the learner is in the intended Chinese K12 context. Before enabling long-term grammar profiles, cross-skill sharing, parent summaries, or reminders, confirm the student or guardian consent settings; for use outside Mainland China, localize curriculum assumptions and emergency guidance first.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (8)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill description is entirely framed as a Chinese-language tutoring experience for English grammar learners, with Chinese trigger phrases and Chinese instructional wording, but it does not state that interaction language is optional or user-selectable. Under the policy, forcing a specific language without opt-in is a natural-language policy concern unless clearly justified or configurable.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The entire skill reference is written as a Chinese-only operational specification, with no indication that users may choose another language or locale. For an English-learning skill, this natural-language constraint can force a specific language environment without explicit user opt-in, which matches the language/locale policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This reference file presents all instructional content in Chinese and does not indicate that the user can choose another language. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy concern unless the locale limitation is explicitly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The document is written entirely in Chinese and contains no indication that language selection is optional or that other locales are supported. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The entire shared instruction file is written only in Chinese and includes user-facing prescribed phrasing in Chinese, with no indication that users may choose another language or that the skill is restricted to a Chinese-speaking context. This can constitute a language/locale policy violation because it implicitly forces a specific language without opt-in.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The document states the repository is designed for Mainland China Chinese K12 scenarios, with simplified Chinese wording and Mainland emergency channels as defaults. This is a natural-language locale policy constraint that applies by default rather than offering user choice or opt-in within the skill behavior.
Content: No source excerpt is available for this finding.

Vague Triggers

Low

Category: Not specified by scanner
Confidence: 86% confidence
Finding: The trigger phrases include very broad tutoring-style requests such as asking for grammar help or error finding, which can cause the skill to activate outside its intended narrow scope. Over-broad invocation is dangerous because it can misroute users away from better-suited skills, unexpectedly collect educational performance data or consent prompts, and create confusing behavior boundaries for minors.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 89% confidence
Finding: This file contains instructional content exclusively in Chinese, beginning with the title and usage notes, with no opt-in or alternative language guidance. Under the policy, forcing a specific language without user choice can be a natural-language policy concern unless the locale constraint is documented and justified.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.