Security audit

写作手艺 - 写作是门手艺

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language writing-coaching skill made of Markdown guidance and bundled examples, with no code execution, persistence, or external data handling found.

Install this if you want a Chinese-language writing framework. Be aware it may activate for general writing requests and may answer in Chinese unless your agent preserves your preferred language.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (8)

Natural-Language Policy Violations

Medium

Confidence: 83% confidence
Finding: The skill content is written to operate in Chinese and does not provide a mechanism to preserve or ask for the user's preferred language. This can cause instruction-priority issues and degrade user control, especially if the skill is auto-invoked, because the assistant may switch languages unexpectedly or ignore the surrounding conversation language.

Vague Triggers

Medium

Confidence: 95% confidence
Finding: The trigger conditions are broad enough to activate on ordinary writing-related conversation, not just explicit skill invocation. That increases the chance of unsolicited prompt takeover, where the skill's long-form behavioral instructions override the assistant's normal response style or user intent in contexts that did not clearly request this specialized workflow.

Natural-Language Policy Violations

Medium

Confidence: 87% confidence
Finding: This markdown file presents all instructions and examples exclusively in Chinese, which can constitute a language/locale policy issue when no user opt-in or alternative language option is provided. The file does not state that it is intentionally region-specific or offer any language choice.

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: The file is entirely written in Chinese and presents the skill guidance only in that language, with no indication that users may choose another language or that the scope is intentionally limited to Chinese-speaking users. This creates a natural-language policy concern because it effectively imposes a specific language without user opt-in.

Natural-Language Policy Violations

Low

Confidence: 91% confidence
Finding: The entire skill file is written in Chinese and does not indicate that the user can choose another language or locale. Under the stated policy, forcing a specific language without opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.

Natural-Language Policy Violations

Low

Confidence: 88% confidence
Finding: The entire skill content is written in Chinese and does not offer any language or locale choice to the user. Under the policy criteria, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is clearly documented and justified.

Natural-Language Policy Violations

Low

Confidence: 94% confidence
Finding: This markdown skill appears to require Chinese proficiency for use, but it does not offer the user any language or locale option. Under the policy rule, forcing a specific language without opt-in is a natural-language policy concern unless the locale restriction is explicitly justified.

Natural-Language Policy Violations

Low

Confidence: 95% confidence
Finding: The entire skill is written as Chinese-only instructional content, with no indication that users may choose another language or that the exercise is intentionally limited to a Chinese-speaking context. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.

Static analysis

No suspicious patterns detected.