how-to-research

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 5:46 AM UTC
• Version: 0.1.0

Overview

This is a static Chinese-language research-methodology skill with no executable behavior, persistence, credential handling, or hidden data movement.

Install only if you want a Chinese research-methodology reference to guide planning and report writing. For real surveys, interviews, fieldwork, or document review, keep data collection user-directed, respect consent and privacy, and adapt the government-oriented examples to your domain.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (14)

Vague Triggers

Medium

• Confidence: 87% confidence
• Finding: The README suggests activating the skill with phrases like "用怎样调研这个 skill 做一次竞品调研" and broad topical questions such as "问卷的答项怎么设置", but it does not define precise trigger boundaries or when the skill should not activate. These examples are understandable to humans, yet the absence of explicit constraints or negative examples increases the risk of unintended invocation for overlapping everyday research-related requests.

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The activation description is very broad, covering nearly any research, investigation, planning, or methodology-related request. This can cause the skill to trigger in many unrelated contexts, increasing the chance that the agent follows this skill’s framing when the user did not intend it, which is a prompt-scope and routing weakness.

Natural-Language Policy Violations

Medium

• Confidence: 88% confidence
• Finding: The skill metadata is primarily Chinese and strongly implies a Chinese-language response pattern without stating that output should follow the user’s language preference. Forced locale behavior can degrade user control and, in some systems, cause incorrect routing or unexpected responses that bypass normal user-intent handling.

Natural-Language Policy Violations

Medium

• Confidence: 98% confidence
• Finding: SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all instructional content exclusively in Chinese and does not indicate that the user can choose another language or that the Chinese-only constraint is required for a region-specific or compliance-specific purpose.

Natural-Language Policy Violations

Medium

• Confidence: 94% confidence
• Finding: This markdown skill content forces a specific language for all users, which is a natural-language policy concern under the locale/language rule. There is no indication that the content is region-specific, optional, or that users may choose another language.

Natural-Language Policy Violations

Medium

• Confidence: 91% confidence
• Finding: The entire skill content is presented exclusively in Chinese, with no indication that the user can opt into another language or that the skill is intentionally limited to a Chinese-language or region-specific audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.

Natural-Language Policy Violations

Medium

• Confidence: 93% confidence
• Finding: This markdown file presents all instructional content in Chinese and does not indicate that the language is optional, user-selectable, or limited to a specific regional audience. Under the policy rule for language or locale constraints, forcing a single language without user opt-in is a natural-language policy violation.

Natural-Language Policy Violations

Medium

• Confidence: 94% confidence
• Finding: The file’s natural-language instructions are presented exclusively in Chinese, and there is no indication that the user can choose another language or that the skill is intentionally restricted to a Chinese-speaking audience. Under the policy for language/locale constraints, forcing a specific language without user opt-in is a reportable issue.

Natural-Language Policy Violations

Medium

• Confidence: 95% confidence
• Finding: The HTML document explicitly sets `lang="zh-CN"`, and the page content is written entirely in Chinese, which indicates a fixed language/locale choice. Under the policy rule, forcing a specific language without user opt-in or a documented justification is a natural-language policy violation.

Natural-Language Policy Violations

Low

• Confidence: 82% confidence
• Finding: The entire skill file is written in Chinese and provides no indication that users may choose another language or locale. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be a locale-policy issue.

Natural-Language Policy Violations

Low

• Confidence: 81% confidence
• Finding: This markdown file contains user-facing instructional content exclusively in Chinese, and there is no indication that users may choose another language or that the Chinese-only presentation is a justified regional constraint. Under the policy for natural-language violations, forcing a specific language without user opt-in can be a locale policy issue.

Natural-Language Policy Violations

Low

• Confidence: 94% confidence
• Finding: SQP-3 applies to all file types and covers language or locale policy violations. This file presents all instructional content exclusively in Chinese with no opt-in, alternative language, or documented justification for a language-only constraint.

Natural-Language Policy Violations

Low

• Confidence: 83% confidence
• Finding: This markdown file is entirely written in Chinese and does not indicate that language selection is optional or that alternative locales are supported. Under the stated policy, forcing a specific language without user opt-in is a natural-language locale policy issue.

Natural-Language Policy Violations

Low

• Confidence: 89% confidence
• Finding: SQP-3 applies to all file types and includes language or locale policy violations. This glossary presents all user-facing content in Chinese and does not indicate that the skill is region-specific or that users may opt into another language, which can amount to forcing a specific language without user choice.

Static analysis

No suspicious patterns detected.