Back to skill

Security audit

玄关与书房装修指南

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language renovation advice skill made of static Markdown references, with no code execution, credential access, persistence, or hidden data handling found.

Install this if you want Chinese-language renovation guidance for entryways and study rooms. Treat the construction advice as informational, especially for wall changes, electrical/gas work, waterproofing, and child safety, and rely on qualified local professionals for site-specific decisions.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (24)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

This markdown file is entirely written in Chinese and provides no indication that the language choice is optional or limited to a justified region-specific context. Under the policy, hard-coding a specific language without user opt-in can be a natural-language locale violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
87% confidence
Finding

The skill explicitly instructs the agent to adopt a specific branded voice ('西安装修课堂') and avoid an 'AI' style, which can override user preference for tone or neutrality. This is not a code-execution or data-exfiltration issue, but it is a prompt-quality and trust concern because it nudges responses toward branded persuasion rather than user-directed communication.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
94% confidence
Finding

This markdown file presents all user-facing content in a single language and does not mention any opt-in, alternative locale, or region-specific justification. Under the natural-language policy rule, forcing one language without user choice can be a locale-policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
85% confidence
Finding

The document is predominantly Chinese, but lines L091-L094 introduce English text ('Xi'an Repair Classroom') as part of the content without any indication that the user can choose language or that bilingual branding is required. This can be a natural-language locale-policy issue under the rule because it imposes mixed-language presentation without opt-in or justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

The file content is entirely in Chinese and does not indicate that the skill is region-specific or that users may choose another language. Under the policy, a fixed language or locale without opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
80% confidence
Finding

This reference file is predominantly written in Chinese, but line L19 inserts English-language content without any indication that multilingual output is optional or user-selected. That can conflict with language/locale policy expectations when a skill or reference material imposes a language choice without opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
87% confidence
Finding

This markdown file contains natural-language content only in Chinese, and there is no indication that the skill is region-specific or that users can opt into this language. Under the stated policy, forcing a specific language without user choice can be a locale-policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

This markdown file presents all user-facing content in Chinese and does not indicate that the language is optional or selected by the user. Under the language/locale policy rule, forcing a specific language without opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file presents all user-facing content exclusively in Chinese, and there is no indication that the user can choose another language or has opted into this locale. Under the policy for natural-language violations, forcing a specific language without user opt-in is reportable.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown content presents the skill material only in Chinese, and there is no indication that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the language/locale policy check, forcing a specific language without user opt-in can be a policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
82% confidence
Finding

The entire file is written in Chinese and provides no indication that language selection is optional or that the skill is intentionally limited to a Chinese-language audience. Under the policy rule, a fixed language or locale without user opt-in or clear justification can be a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

This markdown file is predominantly written in Chinese, but line L33 introduces an English header ('Recommend') with no indication that mixed-language output is intentional or user-selectable. Under the language/locale policy rule, forcing or unexpectedly switching language without opt-in can be considered a natural-language policy issue.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

SQP-3 applies to all file types and includes language or locale policy violations. This file presents all user-facing content in Chinese without any opt-in, alternative language, or justification that the content is intentionally limited to Chinese-speaking users.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
84% confidence
Finding

This file contains user-facing natural language content exclusively in Chinese, and there is no opt-in, alternative language, or justification for enforcing a single language. Under the stated policy, forcing a specific language without user choice can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

This markdown file presents all user-facing content in a single language and does not mention any language selection, translation option, or region-specific justification. Under the policy check for natural-language constraints, forcing a specific language without opt-in can be a locale-policy issue.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

The entire skill file is written in Chinese and provides no indication that language selection is optional or limited to a justified region-specific context. Under the policy rule for language or locale, this can be treated as a natural-language constraint without user opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
96% confidence
Finding

This file contains user-facing natural-language content exclusively in Chinese, and there is no indication that the skill offers users a language/locale option. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown content forces a specific language/locale for all users, and there is no indication that the language choice is optional or limited to a justified region-specific audience. The policy requires flagging language or locale constraints when no user opt-in or documented justification is present.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
83% confidence
Finding

The entire skill content is written in Chinese and presents only Chinese-language material, with no indication that users can select another language or opt in to this locale. Under the stated policy, forcing a specific language without user choice can constitute a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

This file contains user-facing natural language exclusively in Chinese, and there is no indication that the skill is region-specific or that users can opt into this language. Under the language/locale policy, forcing a specific language without user choice can be a policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

This markdown file presents all user-facing content in a single language and does not offer an alternative language or note that the skill is intended only for a Chinese-speaking audience. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
86% confidence
Finding

The entire skill content is presented only in Chinese, and there is no natural-language indication that the user can choose another language or that the Chinese-only presentation is required for a region-specific purpose. Under the policy rule, forcing a specific language without opt-in can be a locale-policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
87% confidence
Finding

This markdown file is written almost entirely in Chinese and does not indicate that the skill is region-specific or that users can opt into a Chinese-language experience. Under the policy rule for natural-language violations, forcing a specific language without user choice can be a locale-policy issue.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
94% confidence
Finding

This markdown file presents all user-facing content in a single language and does not indicate that the user can choose their preferred language. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly documented and justified.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.