Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md 核心資料：`references/laozi_quotes.json`
Security audit
老子AI Laozi AI
Security checks for vulnerabilities and agentic risk
Overview
This skill is a static Laozi/Dao De Jing reference helper with no evidence of hidden execution, data access, persistence, or exfiltration.
Installers should expect this skill to read and quote from its bundled Laozi reference database and possibly respond in Traditional Chinese, Simplified Chinese, and English by default. Consider narrowing the trigger wording if unwanted activation on casual Taoism mentions would be disruptive.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md 核心資料：`references/laozi_quotes.json`
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md 核心資料：`references/laozi_quotes.json`
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The trigger scope is broad enough to activate on ordinary mentions of Laozi- or Taoism-related terms, which can cause the skill to take over conversations without clear user intent. This is primarily a scope/UX security issue: over-triggering can lead to inappropriate context switching, unwanted file access, or interference with other skills, though the content here is non-sensitive and does not itself contain dangerous actions.
- Content
Unbounded Output
Medium
- Category
- Output Handling
- Confidence
- 60% confidence
- Finding
Output size or generation rate is not bounded. Unbounded output enables denial-of-service through resource exhaustion, log flooding, or context-window stuffing.
- Content
json "keywords_en": ["Lenient Government", "Fate's Reversals", "True Integrity"], "zh_TW": "其政悶悶，其民淳淳；其政察察，其民缺缺。禍兮福之所倚，福兮禍之所伏。孰知其極？其無正。正復為奇，善復為妖，人之迷，其日固久。是以聖人方而不割，廉而不劌，直而不肆，光而不耀。", "zh_CN": "其政闷闷，其民淳淳；其政察察，其民缺缺。祸兮福之所倚，福兮祸之所伏。孰知其极？其无正。正复为奇，善复为妖，人之迷，其日固久。是以圣人方而不割，廉而不刿，直而不肆，光而不耀。", "en": "Where the government is lazy, the people are genial; where the government is discriminating, the people are dissatisfied. Misfortune rests upon fortune; fortune conceals within misfortune. Who knows the limit? There is no fixed norm. Right becomes strange; good becomes evil; people's confusion has lasted long. Therefore the sage is square without cutting, sharp without wounding, straight without forcing, bright without dazzling." }, { "chapter": 59,
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 79% confidence
- Finding
The description states support for Traditional Chinese, Simplified Chinese, and English, and elsewhere defines a default return format that includes all three languages. This can be read as a locale/language preference being imposed by default rather than selected by the user.
- Content
Static analysis
No suspicious patterns detected.