Back to skill

Security audit

Physiology-PMPH-10edition

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown physiology reference skill collection with no hidden code or privileged behavior, but its medical content should be treated as educational support only.

Install only if you want a textbook-style physiology reference. Do not rely on it alone for patient care, neonatal decisions, prescriptions, dosing, emergency triage, or nutrition/medical interventions; use it as study material or clinician-reviewed support and verify clinical claims against current professional guidance.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (228)

Harmful Content Injection

Critical
Category
Prompt Injection
Confidence
70% confidence
Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · central-inhibition-type-identification/references/mechanism-details.md (reported line 18)May include surrounding context.

md
- 防止运动过度
  - 限制放电频率
  - 同步运动神经元群
- **病理关联**:
  - 破伤风毒素:阻断甘氨酸释放 → 失去抑制 → 强直性痉挛
  - 士的宁(strychnine):竞争性阻断甘氨酸受体 → 类似破伤风症状

## 突触前抑制

### 结构与离子机制
- **典型回路**:感觉末梢A → 投射神经元C;抑制性中间神经元B轴突终末包绕A末梢(轴-轴突触)。

Missing User Warnings

High
Category
Not specified by scanner
Confidence
97% confidence
Finding

This skill gives direct medical treatment instructions to immediately start thyroid hormone replacement in a high-risk pediatric/neonatal context without an explicit warning that the content is informational only and cannot replace urgent clinician evaluation. In this setting, users may over-rely on the skill for diagnosis or treatment timing, which is especially dangerous because neonatal thyroid disorders require prompt but professionally supervised assessment, dosing, and follow-up.

Content

No source excerpt is available for this finding.

Ae4

Medium
Category
analysis-evasion
Confidence
80% confidence
Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 261)May include surrounding context.

md
<a href="https://www.star-history.com/#xllgreen/Physiology-PMPH-10edition&Date">
 <picture>
   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date&theme=dark" />
   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date" />
   <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date" />
 </picture>

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 262)May include surrounding context.

md
<a href="https://www.star-history.com/#xllgreen/Physiology-PMPH-10edition&Date">
 <picture>
   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date&theme=dark" />
   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date" />
   <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date" />
 </picture>

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 263)May include surrounding context.

md
<a href="https://www.star-history.com/#xllgreen/Physiology-PMPH-10edition&Date">
 <picture>
   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date&theme=dark" />
   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date" />
   <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date" />
 </picture>

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README_EN.md (reported line 135)May include surrounding context.

md
<a href="https://www.star-history.com/#xllgreen/Physiology-PMPH-10edition&Date">
 <picture>
   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date&theme=dark" />
   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date" />
   <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date" />
 </picture>

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README_EN.md (reported line 136)May include surrounding context.

md
<a href="https://www.star-history.com/#xllgreen/Physiology-PMPH-10edition&Date">
 <picture>
   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date&theme=dark" />
   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date" />
   <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date" />
 </picture>

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README_EN.md (reported line 137)May include surrounding context.

md
<a href="https://www.star-history.com/#xllgreen/Physiology-PMPH-10edition&Date">
 <picture>
   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date&theme=dark" />
   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date" />
   <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=xllgreen/Physiology-PMPH-10edition&type=Date" />
 </picture>

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
81% confidence
Finding

The skill calculate-body-surface-area explicitly states it calculates body surface area for '中国成年人' (Chinese adults), which is a locale/population-specific constraint. The document does not indicate user choice, opt-in, or a clear compliance/regional reason for enforcing that locale-specific framing.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill name, description, and all operational instructions are written exclusively in Chinese, with no indication that users may choose another language or that the skill is intentionally restricted to a Chinese-speaking or region-specific context. Under the stated policy, forcing a specific language without opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Ae4

Medium
Category
analysis-evasion
Confidence
80% confidence
Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The file’s name, description, and all user-facing instructional content are written exclusively in Chinese, with no indication that the user can choose another language. Under the stated policy, forcing a specific language without opt-in is a natural-language policy violation unless the locale constraint is explicitly justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

The natural-language description and operating instructions are written exclusively in Chinese, which imposes a language requirement on users without any opt-in or alternative language option. This matches the policy-violation category for forced language or locale constraints.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
86% confidence
Finding

L03使用“当需要解释或分析……时使用本技能”“适用于……场景”等宽泛表述,但没有给出明确触发短语、边界条件或负例,容易覆盖大量普通代谢/内分泌相关对话。对markdown文件而言,这种 invocation 描述缺乏足够 specificity,可能导致非预期触发。

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

L08-L09标注为“触发条件”,但实际内容是“当脂联素与AdipoR1/R2受体结合时”这一生理过程,不是用户如何调用技能的条件。这会使技能何时应被激活、何时不应被激活变得模糊,属于markdown文件中的 ambiguous activation condition。

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The file forces a single language/locale for the skill name, description, and usage instructions. Under the policy, language constraints should either offer user opt-in/choice or be clearly justified as region-specific; this file does neither.

Content

No source excerpt is available for this finding.

Ae4

Medium
Category
analysis-evasion
Confidence
80% confidence
Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill name, description, and all instructional content are written entirely in Chinese, and the file does not indicate that use of Chinese is optional or that the skill is intended only for a Chinese-language or region-specific workflow. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill name, description, and operating instructions are entirely in Chinese, with no indication that the user can choose another language or that the skill is intentionally limited to Chinese-speaking users. This creates a natural-language policy concern because it implicitly enforces a specific language without user opt-in or documented justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

This markdown skill specifies its name, description, and operating instructions only in Chinese, which can amount to a language-policy violation when no user opt-in or locale justification is provided. The file does not indicate that the skill is region-specific or that users may choose another language.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

This markdown skill contains user-facing description and operational instructions only in Chinese. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly documented and justified, which is not present here.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown skill forces a specific language/locale for activation and use, as both the manifest description and the body content are written only in Chinese. Under the policy, language constraints should either be optional for the user or clearly justified as region- or locale-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The skill name, description, and operational instructions are written entirely in Chinese, which imposes a specific language context without any stated user opt-in or alternative. Under the policy for natural-language violations, forcing a specific language is reportable unless the skill offers a language choice or clearly documents a justified locale constraint.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The file's natural-language instructions, headings, and usage guidance are presented only in Chinese. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly justified, which is not stated here.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.