Security audit

how-to-write

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese writing-methodology skill made of static Markdown and HTML, with no executable code or hidden system access.

Install this if you want a Chinese-language writing framework, especially for public-sector style documents. For legal, medical, financial, highly localized, or non-Chinese writing, treat it as general writing guidance and prefer a more specialized source when accuracy or format rules matter.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (12)

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The README suggests activating the skill with everyday-style phrases such as "用怎样写作这个 skill 起草一份工作总结" and generic topic questions like "调研报告怎么开头" or "述职报告忌讳什么". It does not define explicit trigger boundaries, exclusion conditions, or a constrained invocation context, which could cause unintended activation overlap with ordinary writing requests.

Vague Triggers

Medium

Confidence: 93% confidence
Finding: The skill declares very broad activation criteria such as 'any non-fiction writing task' and revising manuscripts, which can cause it to trigger on a wide range of generic user requests. Over-broad routing is risky because it can overshadow more appropriate, narrower skills or inject domain-specific assumptions from this book into unrelated tasks, reducing safety and response quality.

Natural-Language Policy Violations

Medium

Confidence: 88% confidence
Finding: The skill metadata and content are written primarily in Chinese and imply Chinese-language operation without clearly stating whether other user languages are supported. This can lead to unwanted language forcing, where users asking in another language may receive responses in Chinese or within a China-specific bureaucratic framing, causing confusion and misalignment.

Natural-Language Policy Violations

Medium

Confidence: 90% confidence
Finding: This markdown file presents all instructional content in a single language and does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-language audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: The entire skill file is written in Chinese and provides no indication that users may choose another language or that the Chinese-only presentation is a documented requirement. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.

Natural-Language Policy Violations

Medium

Confidence: 88% confidence
Finding: This markdown file presents all instructional content in a single language and does not indicate any user opt-in, alternative locale, or justification for a Chinese-only experience. Under the stated policy, forcing a specific language without user choice can be a natural-language policy violation.

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: This markdown file is natural-language guidance, and all user-facing content is presented in Chinese only. Under the policy rule for language or locale constraints, forcing a specific language without user opt-in or documented justification is a reportable issue.

Natural-Language Policy Violations

Medium

Confidence: 90% confidence
Finding: The page declares `lang="zh-CN"`, and the visible content is written entirely in Chinese, which indicates a fixed language/locale experience. Under the policy rules, forcing a specific language without user opt-in can be a natural-language policy violation unless the constraint is explicitly justified as region-specific, which is not stated here.

Natural-Language Policy Violations

Low

Confidence: 95% confidence
Finding: This markdown file presents all instructional content in Chinese and does not indicate that the user can choose another language or that the skill is intended only for a Chinese-language audience. Under the policy rule for language or locale constraints, forcing a single language without user opt-in is a natural-language policy concern.

Natural-Language Policy Violations

Low

Confidence: 91% confidence
Finding: This markdown file contains natural-language instructional content exclusively in Chinese from start to end. Under the policy, forcing a specific language without user opt-in can be a locale/language policy violation when no alternative or opt-in is provided.

Natural-Language Policy Violations

Low

Confidence: 95% confidence
Finding: This markdown file presents all guidance solely in Chinese and does not indicate that the user can choose another language or that the skill is intended only for a Chinese-language audience. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy concern.

Natural-Language Policy Violations

Low

Confidence: 89% confidence
Finding: SQP-3 applies to all file types and includes language or locale policy violations. This markdown file presents all instructions and content exclusively in Chinese, with no indication that the user opted into Chinese or that the skill is explicitly limited to a Chinese-speaking context.

Static analysis

No suspicious patterns detected.