Security audit

Sustoiclab Expression表达框架工具箱 · Su's StoicLab

Security checks across malware telemetry and agentic risk

Overview

This is a Chinese-language writing and speaking framework skill with no executable code or sensitive system access.

Install this if you want Chinese-language coaching for structuring presentations, articles, reports, or personal stories. It appears limited to conversational outlining and framework selection, but users who need English or multilingual guidance may find the current content unsuitable.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Natural-Language Policy Violations

Low

Confidence: 98% confidence
Finding: This markdown file presents all instructions and examples exclusively in Chinese, which can amount to a language/locale policy issue when no user opt-in or explicit regional justification is provided. The content does not indicate that the skill is intended only for Chinese-speaking users or that language selection is configurable.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.