Security audit

🔬 物理实验思维教练

Security checks across malware telemetry and agentic risk

Overview

This is a Chinese-language physics experiment coaching skill with no executable code or hidden high-impact behavior.

Install this if you want a Chinese-language physics experiment tutoring coach. Be aware that it is designed around Chinese middle-school physics terminology and may interact with learning-profile or reminder features if those are available in your OpenClaw environment.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents the skill reference material only in Chinese, with no user opt-in, alternative language option, or justification for a Chinese-only audience, which can amount to forcing a specific language.

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: This markdown file contains user-facing instructional content exclusively in Chinese, and nowhere indicates that Chinese is optional or that the skill is intentionally restricted to a Chinese-speaking audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.