Security audit

Jianwei

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Chinese-language strategy analysis skill made of Markdown instructions, with no code execution, persistence, credential handling, or hidden data access.

Install this if you want a Chinese-language strategic analysis workflow. Reviewers should note that it may suggest using search and optional expert skills for evidence checking, but the inspected artifacts do not add code, persistence, or privileged local access.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (11)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill advertises implicit activation for broadly defined 'strategic decision intent', which can cause the agent to invoke this skill for many loosely related prompts rather than only explicit strategy requests. Over-broad routing increases the chance of context hijacking, unintended tool/skill selection, and misapplication of a high-authority 'chief-agent' workflow to requests outside its safe scope.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The file is entirely in Chinese and does not offer a language choice or document a locale constraint, which can cause reviewers, operators, or downstream agents who expect English or multilingual content to misunderstand requirements or skip effective oversight. In a strategic-analysis skill, ambiguity or inaccessible instructions can degrade safe operation, hinder auditing, and increase the chance that unsafe or low-quality outputs are produced without detection.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 87% confidence
Finding: The document presents all instructional content only in Chinese, which can amount to a language/locale policy violation when no user opt-in or alternative language option is provided. The file does not state that the skill is region-specific or otherwise justified as Chinese-only.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This markdown file contains all user-facing instructions in Chinese and does not indicate that the user may choose another language or that the skill is limited to a Chinese-language or region-specific workflow. That can violate language/locale policy because it implicitly forces a specific language without user opt-in.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This markdown file presents all instructions exclusively in Chinese and does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The document title and all operational instructions are written solely in Chinese, indicating the skill is intended to operate in a fixed language. Under the policy, forcing a specific language without user opt-in or documented locale justification is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The entire skill file is written in Chinese and does not indicate that language selection is optional or limited to a justified region-specific context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This markdown file contains all user-facing instructions in Chinese and does not indicate that language selection is optional or limited to a specific regional/compliance context. Under the language/locale policy rule, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The file content is entirely in Chinese and does not offer any language-choice mechanism or document a required locale constraint. In practice, this can exclude users or downstream agents that operate in other languages, causing misunderstanding of instructions and degraded reliability, though it is not a classic security exploit. In this strategic-analysis skill context, the issue is somewhat more understandable because the skill metadata is also Chinese-focused, which lowers adversarial concern but does not eliminate the accessibility and misuse risk.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 86% confidence
Finding: The document title and all operational instructions are written exclusively in Chinese, indicating a fixed language expectation for the skill. There is no natural-language statement offering multilingual support or user opt-in for language/locale, which can violate language-choice policy.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The title and all normative instructions are written as a required output specification in Chinese, indicating the skill enforces a specific language/locale. The file does not mention any user opt-in, alternative language support, or region-specific justification, which fits the language-policy violation criteria.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.