Security audit

PIPL Guardrail

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local Chinese PIPL personal-information guardrail that detects, masks, or blocks sensitive text without network access or persistence.

Install this only if you want a China PIPL-oriented local guardrail. It does not send data over the network, but detect mode can echo the original input in its output, so use mask or block mode where plaintext should not be passed onward or logged.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (7)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: 该文件的全部自然语言说明均为中文，未见任何提示表明技能支持其他语言、允许用户选择语言，或该中文限定具有区域合规上的明确理由。按照语言/locale 政策，这类默认强制单一语言而无 opt-in 的说明可构成自然语言政策违规。
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The package description is entirely in Chinese and the manifest sets region to cn, which together indicate a locale-specific constraint. The file does not explicitly present this as an opt-in language/locale choice or clearly justify the restriction as a region-specific tool, so it may violate the language/locale policy criterion.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This Python file contains user-facing natural-language strings entirely in Chinese, including the module docstring and command-line help/output text. Under the policy, forcing a specific language without opt-in is a natural-language policy violation unless the locale constraint is explicitly justified, which is not stated here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The argparse descriptions, errors, and printed status messages are all Chinese-language strings, with no option for the user to select another language. This enforces a specific locale in the skill's operational interface, which the policy disallows absent opt-in or documented justification.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The only natural-language content in the file is written in Chinese, which imposes a specific language choice on readers without any opt-in or explanation of a region-specific need. Under the policy, locale or language constraints should either offer choice or be clearly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The file’s natural-language documentation is entirely in Chinese, which imposes a specific language without any opt-in or documented locale justification. Under the policy, language-specific content is a finding unless the skill offers language choice or clearly documents that it is region-specific.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 79% confidence
Finding: This Python file contains natural-language docstrings and metadata labels exclusively in Chinese, including the module description and profile name. Under the policy rule for language or locale, this can be a violation when a specific language is enforced without offering an explicit user choice or documenting a justified locale constraint.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.