xinjianxue-skill-emotion_qa-global

• Outcome: Review
• Latest audit: Sep 14, 2026 · 3:21 PM UTC
• Version: 1.0.1

Overview

The skill is a coherent XinJianXue API integration, but it needs review because it asks users to paste a sensitive one-time account-binding code into chat and sends personal relationship-analysis data to an external service.

Install only if you are comfortable using XinJianXue's external paid API under your account, entering a one-time binding code into the AI conversation, and sending personal birth, gender, and location details for each report. Verify the official domain, use dedicated credential storage such as a keychain or environment variables, avoid analyzing others without their consent, and understand that changing a completed binding may require customer service.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (2)

T09 · Insecure Skill Coding Practices

Error

• Location: SKILL.md:135

Finding

Sensitive One-Time Authorization Credential Collected Through the Conversation

Content

View full analysis

"Open the official website **www.xinjianxue.com → sign in → "Personal Center" (个人中心) → "AI Assistant Authorization Code" (AI 助手授权码)**, and send me the 8-character authorization code shown there; I need it to complete the account binding. > Reminder: this code is a **sensitive one-time credential** that is voided the moment the binding succeeds — please confirm you are talking to the official XinJianXue AI assistant (service domain `www.xinjianxue.com`) and send it only to me, this one AI; do not post it in a group chat, do not screenshot or share it, and do not give it to any other AI." `POST /api/xinjianxue/ai/license/bind` with body: ```json { "license": "XJX-AI-xxxxxxxxxxxxxxxx", "auth_code": "" } ``` On success it returns `api_key` (the business credential). > ⚠️ **The AI authorization code is a sensitive one-time credential** (8 characters, case-sensitive); it is voided once binding succeeds, and **it may only be used for this one binding**. ``` ### Technical Analysis The Skill explicitly classifies the eight-character authorization code as a sensitive credential, but requires the user to submit it directly to the AI through the conversation. This places the credential in model context and potentially in conversation history, platform telemetry, debugging traces, monitoring systems, or tool-call logs. The fact that the code becomes invalid after successful binding limits post-binding reuse, ...[truncated 1815 chars]

Remediation

View remediation

other

Warning

• Location: SKILL.md:201

Finding

Transmission of Detailed Personal and Location Data to an External Service

Content

View full analysis

⚠️ **Before you start**: calling this service sends personal information about the subject — date of birth (plus time, if known), gender, place of birth, current location — to the XinJianXue API (`www.xinjianxue.com`) for processing; it is used only for this one analysis and is not stored. This AI calls under your account identity and consumes tokens per call. **Please confirm you understand and agree before starting.** ``` ```markdown ## §5. Report input specification - There are two input tiers; **both are billed at tier b (basic) — tier a costs no extra tokens**: - **a (full)**: the subject's date and time of birth + gender + place of birth (country + state/region/city) + current location - **b (basic)**: only the subject's date of birth + gender + current location - **Both tiers must provide**: gender, date of birth (if the user knows the time of birth, include it and the call is automatically upgraded to tier a), and the subject's current location (country + state/region/city) - **Tier a additionally requires**: the exact hour + minute of birth, and the place of birth (country + state/region/city) - **Multi-person analysis**: pass a `people` array, each person `{name, birth, gender, place, country}`. - ⚠️ If the user has not supplied everything, the AI must ask for the missing pieces first — never call with parameters missing. Example request body: ```json { "license": "XJX-AI-xxxxxxxxxxxxxxxx", "api_key": "", "birth": "1990-01-01 08:30", "gender": "Female", "country": "United States", "place": "New York City", "current_country": "United States", "current_place": "New York City" } ``` ``` ### Technical Analysis The Skill requires the collection and transmission of a subject's date of birth, gender, and curr ...[truncated 2337 chars]

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 80% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 112)May include surrounding context.

md

Call `POST /api/xinjianxue/ai/license/verify` (include credentials if you have them; body or headers are both accepted). **The only criterion is `pass`:**

- `pass: true` → **already onboarded**: use the APIs directly, and do not ask the user for any credential.
- No credentials / `pass: false` → act on the returned `msg`; **go to Step 1 only once you have confirmed "never onboarded"**. Do not blindly re-apply (re-applying produces an extra license that nobody uses).

### Step 1: Apply for the AI business license (once only)

Static analysis

No suspicious patterns detected.