Back to skill

Security audit

Gamification

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown-only gamification design skill with no executable code, persistence, credential handling, or hidden external behavior.

Install this if you want Chinese-language gamification design assistance. Be aware that broad trigger words like gamification or feedback loop may activate it in adjacent discussions, and users who prefer another language may need to explicitly ask the agent to respond differently.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (7)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The trigger phrases include generic terms such as '游戏化', '游戏机制', and '反馈循环' that are broad enough to match ordinary discussion, increasing the chance this skill activates outside the user's intent. Over-broad activation can cause unintended instruction routing, interfere with other skills, and unexpectedly inject the skill's behavioral framework into unrelated conversations.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

This markdown file presents all headings and usage instructions exclusively in Chinese, which can impose a specific language on users without any opt-in or stated regional constraint. Under the language/locale policy rule, a skill should either offer language choice or clearly justify why a fixed locale is required.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The title and primary descriptive instruction are entirely in Chinese, and the file provides no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking context. This creates a natural-language locale constraint without explicit opt-in, which matches the policy violation criteria.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The title and the entire requirements checklist are written exclusively in Chinese, and the file provides no indication that users may choose another language or that the skill is intentionally limited to a Chinese-only regional context. Under the policy, forcing a specific language without opt-in is a natural-language locale constraint that should be documented or made optional.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

The natural-language instructions and user-facing description are entirely in Chinese, which effectively imposes a language constraint. The file does not state that the skill is China-specific or provide an opt-in or alternative language option.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
77% confidence
Finding

This markdown exemplar is entirely written in Chinese and presents all inputs, processes, and outputs only in Chinese. Under the policy rule for natural-language constraints, a skill should not implicitly force a specific language unless it offers user choice or clearly documents a justified locale limitation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

SQP-3 applies to all file types and includes language or locale policy violations. This markdown exemplar presents all instructions, examples, and outputs only in Chinese, with no indication that the user can choose another language or that the locale restriction is required for a justified region-specific purpose.

Content

No source excerpt is available for this finding.