Security audit

谈判说服工具箱 · Su's StoicLab

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language negotiation self-defense guide with markdown-only instructions and no hidden execution, persistence, or data access behavior.

Install this if you want Simplified Chinese guidance for recognizing persuasion and negotiation pressure tactics. Be aware that the material discusses influence techniques, so use it for defensive awareness and legitimate communication rather than manipulating others.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (6)

Natural-Language Policy Violations

Medium

Confidence: 94% confidence
Finding: The description explicitly states '简体中文技能，面向中文用户', which imposes a language/locale constraint in natural language. The file does not indicate that users may choose another language or that this restriction is an optional, justified regional limitation.

Natural-Language Policy Violations

Medium

Confidence: 88% confidence
Finding: SQP-3 applies to all file types and covers language or locale policy violations. This markdown content forces a specific language for all users with no opt-in, alternative locale, or justification that it is intended only for Chinese-speaking users.

Natural-Language Policy Violations

Medium

Confidence: 86% confidence
Finding: The title and all instructional content are written entirely in Chinese, and the file provides no indication that language choice is optional or that the locale is intentionally limited for a documented regional use case. Under the language/locale policy, a skill should not implicitly force a specific language without opt-in or justification.

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: The entire skill content is written in Chinese and provides no indication that language selection is optional or user-driven. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale limitation is clearly justified, which is not present here.

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: This markdown file uses Chinese throughout and does not indicate that the user can opt into another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the language/locale policy rule, forcing a specific language without user choice can be a natural-language policy violation.

Natural-Language Policy Violations

Low

Confidence: 90% confidence
Finding: The entire skill content is written in Chinese and does not indicate that the user can choose another language or that the material is intentionally limited to a Chinese-speaking audience. Under the language/locale policy rule, a fixed language without user opt-in or clear justification is a natural-language policy concern.

Static analysis

No suspicious patterns detected.