Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Security audit
物理解题教学指导
Security checks for vulnerabilities and agentic risk
Overview
This is a Chinese K12 physics teaching skill with disclosed class-record features and consent controls, and I found no hidden code, exfiltration, or destructive behavior.
Install this for Chinese-language Mainland K12 physics teaching contexts. Before use, confirm your platform's persistent-memory and file controls match the documented consent model, use student aliases rather than real identifiers, avoid confidential or not-yet-completed exam questions, and use the pause/delete/export controls when records should not be retained or shared.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (20)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The trigger phrases include generic expressions such as '这道物理题怎么讲', '学员不会做物理题', and '学员解题弱', which are broad enough to activate in many normal teaching conversations. Overbroad activation can route unrelated or higher-priority requests into this skill, causing inappropriate data handling, missed specialist routing, or accidental persistence/sharing behaviors described elsewhere in the skill.
- Content
Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
This markdown file contains user-facing instructional content exclusively in Chinese, including the title, examples, and teaching guidance. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is explicitly justified, which is not stated here.
- Content
Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
This markdown file presents all instructional content in Chinese and does not indicate that users may choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the policy rule for language or locale constraints, forcing a specific language without opt-in is a natural-language policy concern.
- Content
Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The entire skill-support document is written only in Chinese and provides no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly documented and justified.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The entire skill guidance is written only in Chinese and includes prescribed Chinese-language user-facing phrasing, such as the exact sentence to use in L11 and quoted prompts in L14, L34, and L35. This imposes a specific language/locale on interactions without indicating that the user can choose another language or that the restriction is region-specific.
- Content
Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 85% confidence
- Finding
该文件全文以中文编写，并在内容中直接规定交接字段、训练话术和使用方式，但没有任何关于语言/locale 选择、用户偏好或适用区域的说明。根据规则，强制单一语言而未提供用户选择，属于自然语言层面的语言/locale 政策风险。
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
L11 明确说明本库按“中国大陆的中文 K12 场景”设计，L13-L17 进一步要求其他语言或地区在完成本地化前不应直接使用。这种默认地域和语言约束属于自然语言层面的 locale policy 限制，但文中没有提供用户侧的语言/地区选择或显式 opt-in 机制。
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The entire file is written in Chinese and uses Chinese-only terminology and labels, but nowhere indicates that the skill is China-/Chinese-language-specific or that users can opt into this locale. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
This markdown file contains instructional content exclusively in Chinese and does not indicate that the language is optional, user-selectable, or justified by a region-specific constraint. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all instructional content in Chinese only, with no user opt-in, alternative language option, or explicit justification that the skill is intended solely for a Chinese-language audience.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
SQP-3 applies to all file types and includes language or locale policy violations. This file presents all instructional content in a single forced language without any user opt-in, alternative language option, or justification that the skill is region-specific.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 84% confidence
- Finding
SQP-3 applies to all file types and covers language or locale policy violations. This file presents all instructions and templates only in Chinese, with no indication that users may choose another language or that the locale restriction is optional or justified as region-specific.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 82% confidence
- Finding
The description is written as a normative contract for the skill ecosystem and specifies Chinese-only terminology such as grade bands and vocabulary references, but it does not indicate that the skill is region-specific or offer any language/locale opt-in. Under the policy, forcing a specific language or locale without user choice can be a natural-language policy violation.
- Content