PKU Info Auth

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 5:41 AM UTC
• Version: 1.0.0

Overview

This skill is a transparent PKU credential-helper guide that stores credentials in the OS keyring and does not include executable code.

Install this only if you intend to use PKU-related CLI tools with stored credentials. Run the initial credential storage yourself, confirm which PKU service an agent is logging into before allowing auto-login, and use info-auth clear if you no longer want credentials stored in the OS keyring.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Credential Access

High

• Category: Privilege Escalation

Content

```bash
info-auth store
# User enters username + password interactively
# Credentials stored in OS keyring, encrypted
```

### Agent workflow

• Confidence: 70% confidence
• Finding: Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Credential Access

High

• Category: Privilege Escalation

Content

```bash
info-auth store
# User enters username + password interactively
# Credentials stored in OS keyring, encrypted
```

### Agent workflow

• Confidence: 70% confidence
• Finding: Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Credential Access

High

• Category: Privilege Escalation

Content

```bash
info-auth store
# User enters username + password interactively
# Credentials stored in OS keyring, encrypted
```

### Agent workflow

• Confidence: 70% confidence
• Finding: Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The skill description contains very broad trigger phrases such as 登录, 凭据, keyring, credential, and auth, and says it is the FIRST skill to use before other PKU services. That can cause the agent to invoke this authentication skill in situations where the user did not explicitly request credential handling, increasing the chance of unnecessary exposure to sensitive auth workflows or prompting around secrets.

Natural-Language Policy Violations

Medium

• Confidence: 97% confidence
• Finding: The development note mandates that all user-facing strings be in Chinese, which is a language-policy constraint applied unconditionally. The file does not indicate that users can choose their preferred language or that the Chinese-only behavior is an explicit opt-in.

Static analysis

No suspicious patterns detected.