Back to skill

Security audit

会议纪要格式化

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward meeting-minutes formatter that uses local templates and does not show hidden execution, persistence, credential use, or data exfiltration.

Before installing, confirm that a Chinese-language meeting-minutes workflow fits your needs. Treat pasted meeting notes and generated HTML as potentially sensitive business records, especially for board, finance, or personnel discussions, and share the output only with intended recipients.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (15)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The skill description is written as a Chinese-only instruction and presents the skill purpose in Chinese without indicating that other languages are supported for the interaction. This can violate language/locale policy when a skill appears to require a specific language without user opt-in or an explicit justified locale constraint.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The label, description, section titles, and field names are entirely specified in Chinese, which indicates the skill is fixed to a single language/locale. There is no indication in the file that users can opt into this language or select an alternative, which can violate language-choice policy for general-purpose skills.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
85% confidence
Finding

This JSON manifest uses Chinese-only labels and section titles and explicitly sets "formal_language": true, which indicates a fixed language/locale presentation. The file does not offer a user language choice or document a justified region-specific constraint, so it may violate the policy against forcing a specific language without opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This manifest uses Chinese for the label, description, section titles, field names, and column headers, but provides no indication that the skill is region-specific or that users can choose another language. That creates a natural-language locale policy concern because the skill appears to enforce a specific language by default.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The template’s label, description, section titles, field names, and column names are all hard-coded in Chinese, which imposes a specific language/locale on users. The file does not indicate that Chinese is optional, user-selected, or required for a documented region-specific purpose.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

The label, description, section titles, and field names are all specified only in Chinese, which indicates a fixed language/locale in the skill content. The file does not provide any user opt-in, alternative locale, or justification that this is a region-specific skill, so it may violate language-choice policy expectations.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
94% confidence
Finding

The manifest uses Chinese-only natural-language labels and descriptions such as "每日站会型" and section titles without documenting that the skill is intended specifically for Chinese-speaking users. Under the policy, forcing a specific language without user opt-in or explicit locale justification is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
92% confidence
Finding

The document declares lang="zh-CN", which hard-codes a specific language/locale. Under the policy rules, forcing a locale without user opt-in or a documented justification is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
94% confidence
Finding

The HTML document explicitly sets the page language to "zh-CN", which imposes a specific language/locale choice in the skill file. Under the policy, locale constraints should be user-selectable or clearly justified as region-specific, and no such opt-in or justification appears here.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
94% confidence
Finding

The HTML document sets lang="zh-CN", which establishes a fixed language/locale in the file. Under the policy rules, locale constraints should either offer user opt-in/choice or be clearly documented as justified for a region-specific skill, neither of which appears here.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

The template sets the document language to "zh-CN", which imposes a specific locale choice in the file. Under the policy, forcing a language or locale without user opt-in or a documented regional justification is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
92% confidence
Finding

The HTML document sets lang="zh-CN", and the surrounding visible/template text is also exclusively in Chinese. Under the policy, forcing a specific language or locale without user opt-in or a documented justification is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

The template sets lang="zh-CN", which forces a specific language/locale in the generated content. Under the policy, locale constraints should either be user-selectable or clearly documented as justified for a region-specific skill, which is not evident in this file.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
92% confidence
Finding

The HTML document sets lang="zh-CN", which is a natural-language/locale choice embedded in the file. Under the policy, forcing a specific locale without user opt-in or clear justification can be a policy violation, and this placeholder file does not document any reason for restricting output to Chinese.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
92% confidence
Finding

The HTML document declares lang="zh-CN", which is a natural-language locale choice embedded in the file. Under the policy, forcing a specific language or locale without user opt-in or a documented justification can be a policy violation, and this placeholder file provides neither.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.