Back to skill

Security audit

教师教学能力动态评估Skill

Security checks for vulnerabilities and agentic risk

Overview

This is a design-oriented Chinese K-12 teacher evaluation skill with sensitive education-data concepts, but its behavior is disclosed, coherent with its purpose, and contains no executable or hidden mechanism.

Install this only if you want a Chinese K-12 education analytics design aid. If adapted into a real system, treat teacher names, student performance data, rankings, exports, and permission changes as sensitive and require school-approved access controls and privacy review.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The manifest description is written entirely in Chinese and presents the skill as a general-purpose teacher evaluation system, but it does not state that the skill is region-specific or provide any language/locale opt-in. Under the policy, forcing a specific language without user choice is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The manifest describes a system for generating same-grade class comparison charts, teacher teaching-capability evaluation, role-based access to teacher data, and trend tracing based on student performance data. This document instead specifies a separate教材版本→标准知识点 mapping architecture, including curriculum-standard tables, textbook-version tables, school textbook configuration, and cross-version migration logic, which is not mentioned in the declared skill purpose.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The document is written as a general solution but immediately fixes the skill to Chinese primary and secondary textbooks and the 2022 compulsory education curriculum standard. Because the file does not explicitly state that the skill is only for China-specific deployments or offer any locale choice, it imposes a specific locale context in natural language.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
87% confidence
Finding

The file is written entirely in Chinese and all example labels, chart titles, and narrative output are fixed to Chinese-language strings. Under the policy rule for language/locale, this can be a violation when a skill imposes a specific language without documenting user choice or a justified locale restriction.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
79% confidence
Finding

This file presents all user-facing policy content in a single language without stating that the skill is intended only for Chinese-speaking users or offering a language choice. Under the stated policy, forcing one language without opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.