Office Collaboration Radar (Chinese)

• Outcome: Review
• Latest audit: Sep 20, 2026 · 3:36 AM UTC
• Version: 0.4.4

Overview

This skill is a clearly scoped local tool for turning Chinese collaboration notes into structured status cards, with no evidence of hidden network access, persistence, or unsafe automatic actions.

Install only if you want a Chinese-focused, local collaboration-status extraction workflow. Treat its redaction as helpful but not a complete secret scanner; highly sensitive meeting notes or credentials should be cleaned before use. Review output files before importing them into external PM systems because this skill prepares mappings but does not itself write to those systems.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration

Findings (24)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 95% confidence

Finding

A second independently reported description-behavior mismatch indicates the skill may only consume pre-existing card JSON rather than extract from raw materials, while still claiming to sanitize secrets, verify evidence, and detect conflicts. In a security-sensitive collaboration workflow, false claims about redaction and verification can cause disclosure of PII or credentials and produce misleading outputs that appear trustworthy but are not validated.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 95% confidence

Finding

A second independently reported description-behavior mismatch indicates the skill may only consume pre-existing card JSON rather than extract from raw materials, while still claiming to sanitize secrets, verify evidence, and detect conflicts. In a security-sensitive collaboration workflow, false claims about redaction and verification can cause disclosure of PII or credentials and produce misleading outputs that appear trustworthy but are not validated.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 92% confidence

Finding

The skill describes local file read/write behavior but does not declare an explicit tool scope such as allowed tools or permissions. This creates an authorization-boundary ambiguity: even if the prose says it only reads user-specified files and writes to explicit output paths, the runtime has no machine-enforced restriction, so a host agent could grant broader filesystem access than intended.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 84% confidence

Finding

L005-L006 将“用户提到…或粘贴协作文本时使用”作为触发描述，其中“项目进展”“待办提取”等词语在日常办公对话中非常常见，且未给出明确的边界或反例。虽然列举了若干短语，但整体触发范围仍较宽，难以区分何时应激活该技能、何时只是普通讨论。

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The file title and all presented output are entirely in Chinese, indicating the skill's expected behavior is fixed to a specific language. There is no indication anywhere in the markdown that the user can choose another language or that the locale restriction is justified as region-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The document begins with a Chinese-only heading and the entire expected output is written in Chinese, which implies the skill expects a fixed language/locale. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified, which is not present here.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

This manifest-style JSON is entirely populated with Chinese-language field values such as project name, status, summary, and task details, indicating a fixed locale expectation. Under the policy, forcing a specific language without offering user choice or documenting a justified regional constraint is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

This JSON manifest-like file contains all user-facing content exclusively in Chinese, including project fields, statuses, and human-confirmation guidance. Under the policy, a fixed language/locale is a violation unless the skill offers user opt-in or clearly documents that it is intended for a Chinese-specific context.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

This markdown file presents all headings, instructions, and output content in Chinese, which can amount to a language/locale policy violation when no user opt-in or documented regional constraint is provided. The file does not indicate that the skill is China-specific or that users can select another language.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

This Python file contains natural-language documentation and runtime messages entirely in Chinese, including the stated behavior at L010-L011 that errors return friendly Chinese prompts. Under the policy, forcing a specific language without offering user choice is a locale/language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The document’s instructions and schema descriptions are entirely in Chinese and direct the skill’s behavior in that language, but there is no indication that the user can opt into another language or that the skill is intentionally limited to a Chinese-only regional context. This can violate language/locale policy when a skill forces a specific language by default.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The entire template, headings, field labels, and instructions are written exclusively in Chinese, which imposes a specific language/locale on users. There is no indication that users may choose another language or that the template is intentionally limited to a Chinese-only regional or compliance context.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The entire schema and example content are written in Chinese, and the file does not offer a language choice or explain that the skill is intentionally limited to a Chinese-speaking or region-specific context. Under the policy for natural-language violations, forcing a specific language without opt-in is in scope.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

This markdown file presents all operational guidance in Chinese, and there is no indication that users can opt into another language or that the skill is intentionally limited to a Chinese-speaking or region-specific audience. That can violate language/locale policy requirements when a skill implicitly forces one language without user choice.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The instructions require output in Chinese phrases such as "JSON 输出必须放在" and prescribe Chinese placeholder values like "未提供" and "存在冲突，需人工确认". This imposes a specific language/locale in the skill template without any opt-in or alternative, which matches the language-policy violation category.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The markdown content is entirely written in Chinese and provides no indication that language selection is optional or that the skill is intentionally limited to Chinese-speaking users. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 80% confidence

Finding

L038 明确说明将 default_prompt 改为中文，以提升中文场景下的自动唤起命中率。这种默认语言设定若应用到实际触发链路，可能在未获得用户明确选择时偏向特定语言，属于自然语言层面的语言策略约束。

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 84% confidence

Finding

The description and default prompt state that the skill generates output from '中文协作材料' and analyzes only explicitly specified Chinese collaboration files. This reads as a language constraint without any indication that users can choose another language or opt in, which may conflict with language/locale policy expectations.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 88% confidence

Finding

This markdown file is entirely written in Chinese, beginning with the title at L01, and does not indicate that language selection is optional or user-configurable. Under the policy rule for natural-language violations, forcing a specific language without opt-in can be a locale/language policy issue.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

This markdown chat log presents all user-facing natural language exclusively in Chinese and does not indicate that users can choose another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 78% confidence

Finding

The file content is entirely in Chinese and provides no indication that language selection is optional or that the skill is intentionally restricted to a Chinese-language context. Under the stated policy, forcing a specific language without user opt-in can constitute a locale-policy issue.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Low

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

模块头部文档明确写明“仅依赖 Python 标准库”，但自测中实际导入了 export_card 和 radar_chart 两个项目内模块。这不是单纯的文档不完整，而是对依赖边界的直接陈述与实际行为不一致。

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Low

• Category: Not specified by scanner
• Confidence: 89% confidence

Finding

技能清单将本文件定位为对协作材料做本地抽取、证据校验、脱敏和安全写出的核心处理，但该文件的自测显式依赖并联动下游导出器与雷达图模块。虽然 manifest 提到会输出雷达图与结构化结果，但本文件顶部模块说明（L0002-L0015）宣称“仅依赖 Python 标准库”的核心处理管线，这里实际承担了跨工具协同与可视化能力，超出了该文件自述的纯核心处理范围。

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The entire skill documentation is written in Chinese and does not indicate that users may choose another language or that the locale restriction is required for a region-specific use case. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical

• Code: suspicious.exposed_secret_literal
• Location: scripts/process.py:686