Security audit

区域认知构建器

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese K12 geography tutoring skill with scoped optional profile/reminder handoffs and no executable code or hidden behavior.

Install this skill for Chinese-language mainland-China K12 geography tutoring. Before broader deployment, localize curriculum assumptions and emergency contacts. Enable profile memory, cross-skill sharing, or reminders only when the student/guardian has intentionally opted in.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (6)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The manifest description and the entire skill framing are written as mandatory Chinese-language instructions for using the skill, but there is no statement that the user may choose another language or that Chinese is required for a specific compliance or region-bound reason. Under the policy for natural-language issues, forcing a specific language without opt-in is a locale/language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 86% confidence
Finding: The document title and all instructional content are presented solely in Chinese, and the file does not indicate that the user can choose another language or that the skill is restricted to a Chinese-language audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The schema’s natural-language descriptions and enumerated values are written exclusively in Chinese, including user-facing consent labels and descriptive text. This creates a locale constraint with no indication of user opt-in, multilingual support, or a documented region-specific justification in the file.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file is entirely written in Chinese and provides no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This shared guidance file presents all user-facing instructional policy in Chinese and does not indicate that users may choose another language. Under the language/locale policy check, forcing a single language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The document states the repository is designed for '中国大陆的中文 K12 场景' and sets simplified Chinese, mainland curriculum alignment, and mainland crisis channels as defaults. This is a natural-language locale policy constraint that applies broadly, and the file does not offer an end-user language/locale choice or opt-in within this skill guidance.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.