Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Security audit
数学概念解释器
Security checks for vulnerabilities and agentic risk
Overview
This is a Chinese K12 math concept tutoring skill with disclosed memory and sharing controls, and I found no evidence of hidden execution, exfiltration, or destructive behavior.
Install this for Chinese-language Mainland China K12 math tutoring. Before using it in another region or language, localize curriculum assumptions, minor-consent handling, and crisis-contact guidance. Users who do not want profile memory or cross-skill sharing should use the documented pause, delete, and no-sharing controls.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (9)
Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The entire skill file is written only in Chinese and presents operational guidance, defaults, and constraints without indicating that users may choose another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The document states that the repository is designed for Mainland China Chinese K12 scenarios, with simplified Chinese wording and Mainland China help channels by default. This is a locale-specific policy constraint that applies broadly, and the file does not present it as a user-selectable option or opt-in choice.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 87% confidence
- Finding
The document defines the repository-wide vocabulary entirely in Chinese and states it is the sole source of terminology for all skills and schemas. This imposes a specific language on downstream skill content without any stated user opt-in or documented locale-specific justification.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The title and introductory scope are entirely written in Chinese and describe the file as reference material for a skill, implying the skill content is intended to operate in Chinese by default. There is no visible note offering alternative language support or stating that the language is optional, which can conflict with language/locale choice policies.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 82% confidence
- Finding
This markdown resource is written entirely in Chinese and framed as a skill reference for
xiaozhi-math-concept-explainer, with no indication that users can opt into another language. Under the policy rule, forcing a specific language without user choice can be a natural-language policy violation unless the locale constraint is explicitly documented and justified.- Content
Static analysis
No suspicious patterns detected.