Security audit

论文查重字符策略

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Chinese-language guide for paper-checking product choice, word/character counting, billing estimates, and user-confirmed website navigation.

Before installing, confirm that the default or configured CHECK_SITE_URL is the checking site you intend users to visit, and be aware that the skill is written for Chinese-language paper-checking support and may auto-activate on related word-count or plagiarism-checking questions.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (9)

YARA rule 'privilege_escalation_tools': Privilege escalation tools and techniques [hacktools]

High

Category: YARA Match
Confidence: 75% confidence
Finding: YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).
Content: Scanner excerpt · assets/wps/02-review-tab-annotated.svg (reported line 6)May include surrounding context.
text
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

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The skill description and heading are entirely in Chinese, and the document presents the skill as the default interaction mode for users expressing matching intent. There is no indication that users may choose another language or that the Chinese-only behavior is limited to a justified locale-specific deployment, which creates a language/locale policy concern.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The manifest allows implicit invocation while the default prompt is broad enough to trigger on general discussion of plagiarism checking, pricing, character counting, and website guidance. Without tighter activation constraints, the skill could be invoked in contexts the user did not explicitly intend, causing unwanted redirection to external sites or authoritative-seeming recommendations that bypass normal user confirmation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The entire skill file is written only in Chinese and does not indicate that language selection is optional or that the skill is intended exclusively for a Chinese-speaking or region-specific audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The title and description are presented entirely in Chinese, and additional instructional text throughout the SVG also assumes Chinese as the required language. The file does not indicate that the skill is region-specific or provide any user opt-in for language or locale, which can violate language-choice policy.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This file contains user-facing title and description text entirely in Chinese, and additional visible labels throughout the SVG are also Chinese. Because the skill does not indicate that it is region-specific or provide an opt-in language choice, it may violate the language/locale policy for natural-language content.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The visible instructional text is entirely in Chinese, including the step title and guidance, and the file provides no indication that the skill is intentionally limited to Chinese-speaking users or a China-specific workflow. Under the policy, fixed language/locale behavior without user opt-in or justification is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This file contains user-facing instructional text exclusively in Chinese, including headings and operational guidance. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale restriction is explicitly justified, which is not shown in this file.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 87% confidence
Finding: This markdown file contains user-facing instructional content only in Chinese, and there is no indication that the skill is intentionally limited to Chinese-speaking users or a region-specific audience. Under the policy rule for language/locale constraints, forcing a specific language without opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.