Security audit

Diting Compensation Expert

Security checks for vulnerabilities and agentic risk

Overview

This is a non-executable Chinese compensation-analysis skill with expected handling of sensitive HR salary data.

Installers should treat compensation data as confidential: provide only necessary fields, anonymize employee identifiers where possible, and confirm the desired output language if users do not want Chinese responses.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Natural-Language Policy Violations

Medium

Confidence: 92% confidence
Finding: The manifest description, headings, and operating guidance are written entirely in Chinese and the skill is presented as a Chinese-only expert workflow. There is no statement that users may choose another language or that Chinese is required for a documented regional/compliance reason, which creates a locale-policy concern under the language-choice rule.

Natural-Language Policy Violations

Medium

Confidence: 86% confidence
Finding: 该文件标题及全部说明均以中文呈现，没有提供用户可选择其他语言的说明，也未说明这是仅面向中文地区或中文用户的受限工具。根据规则，强制特定语言而无用户 opt-in 属于自然语言政策违规。

Natural-Language Policy Violations

Low

Confidence: 89% confidence
Finding: This markdown file presents all skill content in a single language and does not indicate that Chinese is optional or required for a region-specific use case. Under the language/locale policy criterion, forcing one language without user opt-in can be a natural-language policy violation.

Natural-Language Policy Violations

Low

Confidence: 91% confidence
Finding: 文件标题“薪酬专家输出模板”以及后续全部示例模板均以中文固定输出，未见任何提示说明可根据用户偏好切换语言，或该技能仅面向特定中文场景。根据规则，强制特定语言且无用户 opt-in 的自然语言约束属于政策风险。

Static analysis

No suspicious patterns detected.