Security audit

a skill for Persona Metadata Framework

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language personality-analysis skill made of Markdown guidance and examples, with no code execution or persistence, but users should be cautious about profiling real people.

Install only if you want a Chinese-language Jungian/personality profiling framework. Use it for self-analysis, fictional characters, historical figures, or public figures from public information; avoid profiling private living people without consent, and treat all psychological conclusions as speculative rather than factual diagnoses.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (6)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The skill explicitly instructs users to gather biographical, behavioral, relational, and possibly primary-source material to infer personality traits, shadow aspects, motives, and interpersonal patterns of identifiable people. That creates a real profiling/privacy risk because it encourages sensitive psychological inference about individuals without any warning, consent boundary, minimization guidance, or harm-reduction constraints.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This markdown file contains user-facing natural language exclusively in Chinese, and there is no indication that the skill offers localization options or that the language restriction is intentional and justified. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The natural-language content forces a specific language/locale for the skill artifact, and there is no indication that users can opt into another language or that the file is intentionally limited to a Chinese-speaking context. Under the stated policy, language constraints without user choice or clear justification should be flagged.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: 整个技能说明从标题到正文均仅以中文提供，未说明是否支持其他语言，也未给出用户可选择语言的方式。根据规则，若技能强制特定语言且没有用户选择或明确合理的区域性说明，可构成自然语言政策问题。
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: A language or locale policy issue can arise when a skill effectively forces one language without offering alternatives or documenting that constraint. This file presents all instructions and outputs in Chinese and does not state that the skill is Chinese-only, region-specific, or user-selectable.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: This markdown file contains only Chinese-language content and does not provide an opt-in, alternative language, or justification for enforcing a single locale. Under the policy-violation category, forcing a specific language without user choice can be a natural-language policy issue.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.