Security audit

China company search wendaoyun

Security checks for vulnerabilities and agentic risk

Overview

This skill queries WenDaoYun for Chinese company records using a user-provided API key and shows no local code execution, persistence, or hidden behavior.

Install this only if you intend to query WenDaoYun/China company records. Keep the API key private, review results before sharing them, and treat legal, tax, risk, employment, customer, supplier, and person-linked records as potentially sensitive.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (29)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The trigger condition is overly broad: "当用户需要查询企业相关信息时触发" can cause the skill to activate for many loosely related requests without clear user intent boundaries. In a skill that exposes risk, judicial, financial, and other potentially sensitive enterprise data, broad invocation increases the chance of unnecessary data retrieval, privacy/compliance issues, or use in contexts the user did not explicitly intend.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 84% confidence
Finding: The skill description omits privacy and compliance guidance despite enabling access to risk, judicial, tax, employment, and other sensitive enterprise-related records. Without visible warnings or usage constraints, users and downstream agents may query or disclose regulated, sensitive, or reputationally harmful information without understanding legal, ethical, or policy boundaries.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file presents all user-facing documentation in Chinese and does not indicate that the skill is region-specific or provide any user opt-in for language/locale. Under the policy, forcing a specific language without user choice is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The file's title and all user-facing documentation are written only in Chinese, with no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking or China-specific context. Under the policy, a fixed language without opt-in or documented justification is a natural-language locale violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The file’s natural-language content is entirely in Chinese, including the title, parameter descriptions, and response field explanations. Under the stated policy, forcing a specific language without user opt-in or a documented justification is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 86% confidence
Finding: The entire skill description and field documentation are written only in Chinese, with no indication that users may choose another language or that the skill is restricted to a Chinese-language or China-specific compliance context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 82% confidence
Finding: The file’s natural-language content, including the title and all field descriptions, is presented exclusively in Chinese. Under the policy, forcing a specific language without user opt-in can be a language/locale policy violation unless the regional constraint is explicit and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The entire skill description, including the title and parameter/response documentation, is presented only in Chinese. This creates a language policy concern because the file does not offer a language choice, opt-in, or any justification that the skill is intended only for a Chinese-language or region-specific audience.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file presents all user-facing content exclusively in Chinese, including the title, parameter descriptions, and response field explanations. Under the policy, forcing a specific language without offering a user choice or documenting a justified locale constraint is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The entire skill reference is written only in Chinese, including the title and all parameter descriptions, with no indication that users can choose another language or that the skill is intentionally limited to a Chinese-only audience. Under the policy, a locale or language constraint should either be optional for users or explicitly justified as region-specific.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 89% confidence
Finding: This markdown file presents all user-facing instructions and field descriptions exclusively in Chinese. Under the policy, forcing a specific language without user opt-in or justification can be a natural-language policy violation, and no language choice or region-specific rationale is provided here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This markdown file uses Chinese for the title, parameter descriptions, and response-field documentation, but it does not state that the skill is region-specific or offer any language/locale choice. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The markdown uses Chinese throughout, including the title and all field descriptions, with no indication that the skill is region-specific or that users can opt into this language. Under the policy, forcing a specific language without user choice or documented justification is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The entire skill description, including the title and parameter/response documentation, is written only in Chinese with no indication that users may choose another language or locale. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless clearly justified as region-specific.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This markdown file uses Chinese exclusively for the title, parameter descriptions, and response fields. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be a locale-policy issue when no alternative language option or justification is provided.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 82% confidence
Finding: The file's title, parameter descriptions, and field descriptions are all presented only in Chinese. This can be a natural-language policy concern if the organization expects skills not to force a specific language without user opt-in or an explicit documented locale constraint.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file presents the skill name, parameters, response fields, and usage instructions entirely in Chinese. Under the policy rules, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale restriction is explicitly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The file's visible user-facing content, including the title and all parameter/response descriptions, is entirely in Chinese. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale restriction is explicitly documented and justified, which is not present here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The entire skill file is written in Chinese and provides no indication that users may choose another language or locale. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 89% confidence
Finding: This markdown file presents all user-facing headings and field descriptions exclusively in Chinese. Under the policy rule for natural-language violations, forcing a single language without opt-in or justification can be a locale-policy issue.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file presents the skill name, request parameters, and response fields entirely in Chinese. Under the policy rule for natural-language violations, forcing a specific language without user opt-in or documented justification can be a locale-policy issue.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 83% confidence
Finding: The entire skill description, including the title and field descriptions, is presented only in Chinese. For a general skill reference, this can constitute a language/locale policy issue because it does not offer an alternative language or explain that the skill is intended only for a Chinese-speaking or region-specific audience.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 85% confidence
Finding: The file presents all user-facing documentation in Chinese and does not state that the skill is region-specific or that language selection is optional. Under the policy, forcing a specific language without opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The entire skill description, including the title and parameter/response documentation, is presented only in Chinese. Under the policy rules, a language restriction can be a natural-language policy violation when the skill forces a specific language without user opt-in or a clearly documented regional justification.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The file's title, parameter descriptions, and field descriptions are entirely in Chinese, and there is no indication that the skill is region-specific or that users may choose another language. This can violate a language/locale policy if skills are expected not to force a specific language without opt-in or documented justification.
Content: No source excerpt is available for this finding.