Back to skill

Security audit

Self-Governor

Security checks for vulnerabilities and agentic risk

Overview

The skill is a Markdown-only decision helper with disclosed, bounded behavior and no evidence of hidden execution, data access, persistence, or exfiltration.

Install this only if you want a Chinese-language meta-decision helper that nudges the agent to pick one next action during branching, costly, or stalled work. Review the 'degrade_continue' behavior if you prefer agents to pause for confirmation before irreversible or public actions.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The manifest description is written as a Chinese-only instruction for the skill and presents the behavior as a general-purpose internal skill, without offering any language or locale choice. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

This markdown file contains all substantive instructions and examples in Chinese, with no indication that users may choose another language. Under the language/locale policy, forcing a specific language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

This markdown file contains user-facing natural-language guidance almost entirely in Chinese, including headings, context, and trigger-exclusion examples. The file does not indicate that Chinese is optional, user-selected, or required for a specific region, which can violate a language/locale policy requiring user choice or explicit justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The reference content is entirely written in Chinese and does not offer any language choice, opt-in, or justification for a locale-specific restriction. Under the policy criteria, forcing a specific language without user choice is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

The document presents all operational trigger guidance exclusively in Chinese, starting with the heading at L03 and continuing throughout the file. Because no alternative language option, opt-in, or justification for a Chinese-only locale is provided, this is a natural-language locale policy issue under the rule.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.