Back to skill

Security audit

S2 中国品牌个性量表演算模型

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent brand-analysis prompt with an optional simple Python scoring snippet and no evidence of hidden access, persistence, or destructive behavior.

Install this if you want a Chinese-market brand personality analysis helper. Be aware that it may answer in Chinese by default and may use web search or simulated semantic estimates for brand traits, so treat its numeric outputs as analytic approximations rather than verified measurements.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The README presents the skill entirely in Chinese and instructs users to invoke it in that mode without offering any language choice or fallback. This can exclude or mislead users who operate in other languages, increasing the risk of misunderstandings about outputs, consent, and appropriate use, though it is not a direct code-execution or data-exfiltration issue.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The skill instructs the agent to operate in Chinese and frames the role and output protocol entirely in Chinese without offering any user choice. This can override a user's preferred language, reduce accessibility, and create prompt-priority conflicts where the agent follows the skill's language constraint rather than the user's explicit request.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.