Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Security audit
物理概念直觉器
Security checks for vulnerabilities and agentic risk
Overview
This is a Chinese K12 physics tutoring skill with disclosed, consent-gated learning-memory and reminder handoffs, and I found no hidden execution, exfiltration, or destructive behavior.
Install this for Chinese-language physics tutoring in the intended K12 context. Before using it with minors or outside mainland China, confirm the platform consent settings, parent-sharing choices, reminder behavior, and localized crisis/help-channel configuration.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (13)
Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
This markdown resource uses Chinese throughout, including the title, explanations, and instructional guidance, with no indication that users can opt into another language. Under the policy rule for language or locale constraints, forcing a specific language without user choice is a natural-language policy violation.
- Content
Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The document is entirely written in Chinese and presents operational guidance for skills without any indication that users may choose another language or locale. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern unless the locale constraint is explicitly documented and justified.
- Content
Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
This markdown file contains natural-language guidance and operational instructions only in Chinese, including normative phrases such as '必须' and procedural requirements. Under the language/locale policy rule, forcing a specific language without user opt-in or a clearly justified locale scope is a policy concern.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 86% confidence
- Finding
The document defines a repository-wide single source of truth entirely in Chinese and states that all SKILL.md, references, and schemas must use these definitions. This is a natural-language locale constraint that appears mandatory and does not provide any opt-in, alternative locale, or justification that the skill is region-specific.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
SQP-3 applies to all file types and covers language or locale policy violations. This reference file consistently uses Chinese throughout and does not mention that the skill is Chinese-only, region-specific, or that users can choose another language, so it appears to force a specific language without user opt-in.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
This markdown file contains user-facing instructional content exclusively in Chinese, and there is no natural-language indication that the user can choose another language or that the Chinese-only scope is intentional. Under the language/locale policy rule, forcing a specific language without user opt-in can be a policy concern.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
This markdown file contains user-facing instructional content exclusively in Chinese, and there is no note offering an alternative language or indicating that the Chinese-only presentation is intentional based on user preference. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 84% confidence
- Finding
The text states that the repository is designed for '中国大陆的中文 K12 场景' and that examples, wording, and default safety help channels are for mainland China. This is a language/locale constraint expressed in natural language and applies broadly, rather than being presented as a user choice or opt-in at runtime.
- Content
Static analysis
No suspicious patterns detected.