Security audit

results-statistics-convention-checker

Security checks for vulnerabilities and agentic risk

Overview

This is a narrow academic writing helper for checking APA-style statistical reporting in English psychology Results sections, with no code execution, credential use, persistence, or hidden data handling.

Install this if you want Chinese-language guidance on APA-style statistical reporting for English psychology Results sections. It is not a statistics calculator and should not be relied on to verify whether the underlying statistical values are correct.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (8)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The description states the skill is for diagnosing '英文心理学论文 Results' and is triggered when users want APA-style rewriting, which constrains output to an English-language context by default. Under the policy rule, forcing a specific language or locale without user opt-in is a natural-language policy concern unless the constraint is explicitly justified as optional or user-selected.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The required input says the user must provide an '英文 Results 部分' draft, which imposes an English-language requirement. Because no alternative language path or explicit opt-in is offered here, this is a language-policy issue under the rule for forced language constraints.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The entire skill/report content is written as a Chinese diagnostic report for an English psychology paper, with no indication that language choice is optional or user-selected. This creates a natural-language locale policy issue because it implicitly enforces a specific output language rather than offering a language/locale choice or documenting a justified regional restriction.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The manifest description is written entirely in Chinese while describing a skill for checking English psychology-paper Results sections, but it does not state that the user may choose the interaction language. This creates a language-policy issue because the skill appears to impose a specific language/locale without explicit user choice or a documented region-specific need.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The checklist hard-codes Chinese-language output requirements (for example, requiring Chinese diagnostic structure and labels) without indicating that this should depend on the user's language preference or explicit opt-in. In a multilingual assistant, this can cause the skill to ignore user intent, degrade usability, and create prompt-level policy conflicts where the model follows the skill's fixed output language instead of the user's requested language.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 87% confidence
Finding: SQP-3 applies to all file types and covers language or locale policy violations. This file presents the skill's expected output format and guidance solely in Chinese, with no indication that users may choose another language or that the locale restriction is intentional and documented.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 80% confidence
Finding: This markdown file presents the skill reference material primarily in Chinese while embedding English statistical examples, with no indication that users can opt into another language or locale. Under the policy rule for language/locale constraints, this can be considered a natural-language policy concern because the file effectively fixes the presentation language without explicit user choice.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: This markdown file contains user-facing instructions entirely in Chinese, while the rubric is for evaluating English psychology papers. The file does not provide an opt-in language choice or explain that the skill is intentionally restricted to Chinese-speaking users, which can violate language/locale policy requirements.
Content: No source excerpt is available for this finding.