Back to skill

Security audit

学术研究助手

Security checks for vulnerabilities and agentic risk

Overview

This skill is a Chinese-language academic research guide with an optional local citation formatter and no evidence of hidden access, persistence, exfiltration, or destructive behavior.

Install this if you want Chinese-language academic writing, literature search, journal submission, conference, and citation-formatting guidance. Treat the API/commercial mode as aspirational unless separately implemented, and verify time-sensitive journal metrics or conference details from official sources.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (10)

Tp4

High
Category
MCP Tool Poisoning
Confidence
94% confidence
Finding

声明描述的是一个覆盖学术研究全流程的综合助手,适用触发场景也应包括论文、文献、期刊、投稿、科研等广泛问题。但提供的代码仅实现了参考文献格式化这一单一功能:根据输入字段拼接APA、IEEE、GB/T 7714格式文本,并通过stdin/命令行运行。代码没有任何论文写作建议、检索、推荐、投稿、会议、项目管理、知识库/API双模式等实现。因此这不是轻微的功能子集,而是主要用途明显不同且范围大幅缩小,属于描述与实际行为不符。

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

L003 将触发器定义为“用户提出论文/文献/期刊/投稿/学术/科研相关问题时使用”,范围非常宽,涵盖大量普通咨询表达,但没有列出边界条件、限定场景或排除示例。这种描述容易使技能在一般性的学习或聊天场景中被过度激活。

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
83% confidence
Finding

L003 以及全文均以中文固定描述技能行为,未说明可根据用户偏好切换语言,也未提供任何语言选择或地区限定理由。根据语言/locale policy,若技能默认强制单一语言而无用户选择,可能构成自然语言策略违规。

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file presents all instructions and recommendations solely in Chinese, and there is no indication that the skill is intentionally limited to a Chinese-language audience or that users may choose another language. Under the stated policy, forcing a specific language without opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

This markdown file presents all guidance exclusively in Chinese, and it does not state that the skill is intended only for Chinese-speaking users or offer an alternative language option. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

This Python file contains user-facing natural-language descriptions and CLI output in Chinese, but it does not indicate that the language is optional or that the skill is intentionally restricted to a Chinese-speaking context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The script prints user-facing error and usage messages only in Chinese. There is no option for the user to select another language, and no documented justification for enforcing this locale.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

Line L077 states that international conferences use English and domestic conferences use Chinese as a blanket rule. This is a natural-language locale policy constraint that does not provide opt-in, exceptions, or acknowledge multilingual contexts.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
94% confidence
Finding

This markdown file contains user-facing guidance only in Chinese, and it does not indicate that the skill is intended specifically for Chinese-speaking users or provide an opt-in language choice. Under the language/locale policy rule, forcing a single language without user choice can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
84% confidence
Finding

This markdown guide is written entirely in Chinese and presents the skill content in a single fixed language with no indication that users may request another language. Under the policy criteria, a skill that forces a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.