Security audit

适童化装修指南

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language Markdown-only child-room renovation advice skill with no code execution, persistence, credential access, or hidden data handling.

Install only if you want a strongly opinionated Chinese-language renovation guide for child-room environmental and safety choices. For decisions involving indoor air quality, building codes, or child safety, compare its advice with qualified local professionals and current standards.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (8)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The trigger list is overly broad for a skill that provides strong, prescriptive advice, so it may activate during general conversations about children’s rooms, family planning, or renovation rather than only when the user explicitly wants this skill. Unintended activation can inject unsolicited medical-adjacent or safety claims and override the user’s preferred context, which is risky even though the content is not overtly malicious.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 80% confidence
Finding: The instruction text is written to enforce a fixed Chinese-speaking persona and response style, with no indication that the user may choose another language or locale. Under the policy, forcing a specific language without opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The entire skill content is written only in Chinese and does not indicate any option for another language, locale selection, or user opt-in. Under the policy rule for natural-language violations, forcing a specific language without explicit choice can be a locale-policy issue.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 81% confidence
Finding: Line L65 states that planning must be implemented together with '儿童房坚决实木 + 乳胶漆墙面 + 瓷砖地面', which presents a rigid requirement rather than an optional recommendation. This is a natural-language policy concern because it imposes a fixed preference without opt-in or alternatives.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The document presents all guidance in Chinese and does not indicate that the user can choose another language or that the skill is limited to a Chinese-speaking or region-specific audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 81% confidence
Finding: This markdown file is entirely written in Chinese and presents its guidance as the default output/content mode, with no indication that users may choose another language. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale restriction is explicitly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 83% confidence
Finding: The entire skill content is presented only in Chinese and does not indicate that users may choose another language or locale. Under the policy for natural-language violations, forcing a specific language without user opt-in can be a violation unless the locale constraint is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: This file is entirely written in Chinese and does not provide an opt-in, alternative language, or justification for restricting the content to a specific language or locale. Under the stated policy, forcing a specific language without user choice can be a natural-language policy violation.
Content: No source excerpt is available for this finding.