Back to skill

Security audit

Art of War

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed strategic planning framework for deciding when and how to use agents, with no evidence of hidden execution, data theft, persistence, or destructive behavior.

Installers should expect this skill to influence agent-planning discussions with an Art of War-style framework and some Chinese terminology. Review whether that style and language mix fits your users; authorize any real-world tool, API, database, or monitoring access separately if an agent later proposes using it.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The activation triggers are broad enough to match ordinary conversations about planning, budgeting, or collaboration, which can cause the skill to engage outside its intended niche. In a prompt-driven agent environment, over-broad auto-activation can inappropriately steer responses, override more relevant skills, or inject domain framing into unrelated tasks.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown skill includes substantial operational instructions in Chinese, including mandatory checklist language such as '必用' and '填不完别发', without indicating that the user can choose another language. That can violate a language/locale policy when the skill effectively requires a specific language for correct use.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
81% confidence
Finding

The chapter mappings and surrounding guidance prominently use Chinese terms such as '始计篇' and '用间篇' as operational labels, but the README does not state that this language usage is optional or provide a user opt-in. This can conflict with language/locale policies when users expect guidance in their chosen language.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

The file header and later user-facing text include Chinese phrases alongside English, but the script does not give the user any option to select or opt into a preferred language or locale. This can violate a language/locale policy when users are implicitly forced into a language presentation they may not understand.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.