Security audit

zayn-order-kickoff

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only Chinese workflow skill for coordinating confirmed hardware order kickoffs, with no hidden execution, persistence, credential use, or data mutation instructions.

Install this if you want a Chinese-language checklist workflow for confirmed hardware order kickoff meetings. Users should still verify payment, logistics, deadlines, and responsibilities in their source systems because the skill is a coordination aid and should not be treated as authority to change records or promise delivery dates.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Vague Triggers

Medium

Confidence: 87% confidence
Finding: L026 将适用场景描述为“需要执行上述订单、交付、付款、发货或异常处理职责的场景”，范围很宽，覆盖大量日常业务表达，但没有给出明确触发短语、边界条件或反例。虽然 L030 提到应调用对应 WorkFn Skill，但仍未具体说明本技能何时应被精确调用、何时不应调用，容易与其他订单或沟通类技能产生重叠。

Natural-Language Policy Violations

Low

Confidence: 87% confidence
Finding: The file contains user-facing natural language entirely in Chinese, but does not state that the skill is Chinese-only or offer a language/locale choice. Under the language/locale policy rule, forcing a specific language without user opt-in can be a policy violation.

Natural-Language Policy Violations

Low

Confidence: 92% confidence
Finding: The document switches into Chinese-only instructions at '使用说明' and continues the operational template entirely in Chinese. This imposes a specific language on users without any stated opt-in, alternative locale, or justification for the constraint.

Natural-Language Policy Violations

Medium

Confidence: 88% confidence
Finding: The markdown instructions are written entirely in Chinese, including the core testing principles, with no indication that language selection is optional or limited to a justified region-specific context. This can violate language/locale policy expectations when a skill implicitly forces one language without user opt-in.

Static analysis

No suspicious patterns detected.