other
Warning
- Location
SKILL.md:239- Finding
Moderation Evasion and Misleading Metaphysical Claims
- Content
View full analysis
- Remediation
View remediation
Security audit
水晶玄学小红书合规文案生成器
Security checks for vulnerabilities and agentic risk
Overview
This markdown-only skill does not execute code or access private data, but it should be reviewed because it teaches users to rephrase restricted crystal claims to appear platform-compliant.
Install only if you deliberately want Chinese Xiaohongshu-style crystal marketing copy. Review outputs before posting, avoid treating the platform-compliance claim as a guarantee, and add clear disclaimers that crystal energy claims are cultural or personal beliefs rather than proven effects.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (1)
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The skill hard-codes a specific language, platform style, and persona without asking the user, which can override user preferences and produce content in an unintended locale or format. In multi-skill agent environments, this kind of forced style behavior can degrade reliability, mis-handle non-Chinese requests, and steer outputs into a specialized domain the user did not consent to.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The trigger logic is broad enough to activate on loosely related crystal or gemstone requests, which can cause unintended persona takeover and force users into a fixed spiritualized/Xiaohongshu-specific workflow they did not request. In an agent setting, over-broad activation can override user intent, introduce policy-sensitive claims about 'energy' or 'aura,' and increase the chance of inappropriate or misleading outputs.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The guide is explicitly framed for Xiaohongshu copywriting and is written bilingually with operational instructions centered on Chinese-language platform conventions. It does not state that this locale/language constraint is optional or user-selected, which can violate the policy against forcing a specific language or locale without opt-in.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
This markdown reference file presents all example content and structural guidance in Chinese, but it does not indicate that Chinese output is optional or limited to a specific region or audience. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy concern.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 80% confidence
- Finding
The description states the content is for use in Xiaohongshu copywriting and the file predominantly provides Chinese-language output patterns, which can amount to a fixed language/locale assumption. Under the policy rule, language constraints should offer user choice or clearly document a justified locale limitation.
- Content