Security audit

Constraint Driven

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only Chinese methodology skill for generating constraint-driven analysis, with no code execution, persistence, credential handling, or hidden data movement found.

Install this if you want a Chinese-language constraint-analysis prompt framework. Before using it with user behavior data or profiling tasks, make sure the data is authorized and privacy-safe, and tell the agent your preferred output language if you do not want Chinese responses.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (10)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The trigger list is broad and loosely bounded, including generic terms like '约束驱动' and '边界方案' plus a meta trigger ('meta-skill-system'), which can cause the skill to activate in contexts where the user did not intend to invoke it. Over-broad activation increases prompt-routing and instruction-precedence risk, especially because the skill then steers execution into its own rigid methodology and random constraint generation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The skill metadata and content are written entirely in Chinese and present Chinese trigger phrases without any indication that language selection depends on user preference. This can bias the agent into responding in a language the user did not request, reducing usability and potentially causing misunderstanding of constraints, outputs, or safety-relevant details.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The file title and the entire skill guidance are written exclusively in Chinese, and the document does not provide any user opt-in, language selection mechanism, or justification for a Chinese-only locale constraint. Under the policy for natural-language violations, forcing a specific language without user choice is in scope.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The markdown content is entirely written in Chinese and presents the template library and usage instructions as the required format, with no indication that users may choose another language or that the locale restriction is necessary for a region-specific purpose. This can violate language/locale policy where user opt-in or explicit justification is required.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This is a markdown file, so SQP-2 applies to omissions in user-facing warnings. The file uses examples involving user behavior data and later user profiling, which can affect privacy, but it provides no caution about consent, sensitive data handling, or privacy implications.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The markdown explicitly frames a workflow for '深入分析用户画像' and generating a detailed user profile report. Because profiling can affect privacy and potentially sensitive inferences, the skill description should warn users about these impacts, but no such disclosure is present in this section or elsewhere in the file.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 84% confidence
Finding: The entire skill exemplar is written exclusively in Chinese and provides no indication that users may choose another language or that the locale restriction is intentional for a region-specific use case. Under the language/locale policy, forcing a specific language without opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The entire skill file, including the title, descriptions, and operational labels, is written exclusively in Chinese with no indication that users may choose another language. Under the policy for natural-language violations, this is a locale/language constraint that lacks opt-in or justification.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This markdown skill exemplar presents all instructions, examples, and outputs exclusively in Chinese, and it does not offer a language/locale choice or explain that the skill is intended only for a Chinese-speaking or region-specific context. Under the policy, forcing a specific language without opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 87% confidence
Finding: This file contains user-facing instructional content exclusively in Chinese, and there is no indication that users can opt into another language or that the skill is intended only for a Chinese-language context. Under the natural-language policy rules, forcing a specific language without user choice can be a locale-policy issue.
Content: No source excerpt is available for this finding.