Back to skill

Security audit

Code Review Cycle

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed, user-invoked code review workflow that delegates coding and review tasks without hidden persistence, credential access, network retrieval, or destructive behavior.

Install this if you want a Chinese-language A/B coding-and-review workflow. Be aware that invoking it can cause the coder agent to modify files in the current workspace, and automatic rounds may repeat changes up to the count you request.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The README presents all user-facing invocation examples and operational instructions exclusively in Chinese, including command usage and follow-up phrases. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless a locale-specific constraint is clearly documented, which is not present here.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The manifest description and core instructions use Chinese as the default interaction language, and the examples continue that assumption. Under the stated policy, forcing a specific language without user choice is a natural-language policy violation unless the locale constraint is explicitly justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The file’s user-facing instructions and generated task prompts are written entirely in Chinese, including required output headings and usage text. This imposes a specific language on users and downstream agents without offering a language choice or documenting a justified locale restriction.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.