Back to skill

Security audit

生物教案设计

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Chinese K12 biology lesson-planning skill with scoped classroom data use and no hidden code execution, network fetches, or install-time behavior.

Install this for Chinese-language biology lesson planning in a Mainland China K12 context. Before use, confirm that classroom records use aliases or seat numbers rather than real student identifiers, and localize crisis/help-channel guidance if deployed outside Mainland China.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (8)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The note text is written entirely in Chinese and presents mandatory usage constraints for the distributed skill copy, which can amount to a locale/language restriction in the skill contract. The file does not offer an alternative language choice or state that the schema is intentionally limited to a Chinese-only regional deployment.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The top-level description is entirely in Chinese and defines required behavior for interfaces and data handling. Because this is part of the natural-language contract for the skill, it effectively imposes a single language context without user opt-in or an explicit region-specific justification.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
84% confidence
Finding

The manifest says this skill should be used only when both conditions '生物 + 教案设计' are met, but the distributed schema allows any subject via a free-form subject field and multiple grade bands from primary through high school. That broad contract supports lesson-planning use outside the claimed biology-specific scope, creating a mismatch between the manifest's narrow intent and the actual enabled data model.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The file’s operational instructions and policy text are entirely in Chinese, including normative guidance that other skills should follow. There is no indication that users may choose another language or that the Chinese-only constraint is optional, which can violate a language/locale choice policy.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

This file's natural-language instructions are entirely in Chinese, and nowhere does it indicate that Chinese is optional or that the skill is restricted to a Chinese-speaking audience. Under the language/locale policy rule, forcing a specific language without user opt-in is a policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The document states that the library is designed for Mainland China Chinese K12 scenarios, with simplified Chinese phrasing and Mainland China help channels as defaults. Although it includes deployment cautions for other regions, it still establishes a fixed language/locale policy rather than offering user choice or opt-in within the skill behavior.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

This markdown file contains natural-language instructional content only in Chinese, and there is no statement that the user may choose another language or that the Chinese-only format is a justified region-specific constraint. Under the policy rule for language/locale, forcing a specific language without opt-in can be a violation.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Low
Category
Not specified by scanner
Confidence
77% confidence
Finding

The manifest describes a lesson-planning skill focused on designing biology lesson plans, inquiry activities, experiment safety, and questioning chains. This schema also exposes interactionLogs, studentTiers, and weaknessRank, which represent post-class reflection and student performance/diagnostic data that go beyond the expressly described lesson-planning function.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.