Back to skill

Security audit

OAISR - 职业AI替代风险评估

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed markdown workflow for estimating occupational AI exposure and does not request dangerous access or perform hidden actions.

Before installing, be aware that the skill may activate on simple profession mentions and its numeric outputs are methodology-based estimates, not guaranteed source data. It does not appear to require sensitive permissions or local system access.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The skill activates on very broad signals such as any job title or generic mentions of AI replacement risk, which can cause unintended invocation during ordinary conversation. Over-broad triggering is risky because it may hijack unrelated user interactions, produce unsolicited analysis, and reduce the reliability and predictability of agent behavior.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The activation section explicitly lists broad triggers without constraints, so the skill may fire on incidental mentions of professions or AI-related topics rather than user intent to invoke this workflow. In context, this is not code-execution dangerous, but it can still cause scope overreach, incorrect routing, and unwanted responses that interfere with safer or more appropriate skills.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

The manifest description includes both English and Chinese text, implying a language presentation choice has been made without stating that users can select their preferred language. Under the language/locale policy rule, skills should offer an explicit language choice or document why a fixed locale is required.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.