Back to skill

Security audit

装修建材选购

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese renovation-material advice skill made of Markdown content, with minor content-quality concerns but no hidden execution, persistence, or data access.

Install this as a Chinese-language renovation-material advice reference, not as professional construction, electrical, gas, waterproofing, medical, or indoor-air-quality guidance. Verify safety and environmental claims with local code, certified contractors, product technical datasheets, and test reports before spending money or changing construction plans.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (140)

Description-Behavior Mismatch

High
Category
Not specified by scanner
Confidence
98% confidence
Finding

The file content is about home-appliance purchasing advice, while the skill manifest describes a renovation and building-material selection skill. This scope mismatch can mislead downstream users or agents into providing advice outside the declared domain, reducing trust and increasing the chance of irrelevant or incorrect recommendations.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The file is entirely written in Chinese and provides no indication that language selection is optional or configurable. Under the policy rules, forcing a specific language without user opt-in is a natural-language locale violation unless the constraint is clearly documented and justified.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The content makes broad environmental and health-related claims about building materials, including assertions that certain products are 'most environmentally friendly' or that others 'inevitably exceed limits' when used at scale, without qualification, sourcing, or a disclaimer that this is not professional environmental, medical, or indoor-air-quality guidance. Users may rely on these claims when making renovation decisions that affect VOC exposure, formaldehyde risk, or moisture/mold outcomes, leading to unsafe choices or delayed consultation with qualified professionals.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

The document consistently presents all instructions and guidance in Chinese, and there is no indication that the skill is region-specific or that the user has opted into this language. Under the policy, forcing a specific language without user choice is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

This markdown file presents all user-facing content in a single language and does not indicate that the skill is intended only for Chinese-speaking users or a China-specific context. That can violate language/locale policy when users are not given an explicit language choice or opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The file content is entirely in Chinese and does not offer any language choice or explain that the skill is intended only for a Chinese-speaking or China-specific audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

This markdown file presents all user-facing content in a single language and does not indicate that the skill is region-specific or that users can opt into that locale. Under the policy, forcing a specific language without user choice can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

This file contains user-facing natural language content exclusively in Chinese, and there is no opt-in, alternative language option, or justification that the content is limited to a Chinese-speaking region or audience as a policy requirement. Under the language/locale policy rule, forcing a specific language without user choice can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

This markdown file presents all user-facing content in a single language and does not indicate that the skill is region-specific or that users can choose another language. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This file contains natural-language instructional content exclusively in Chinese and does not indicate that the language is optional, user-selected, or justified by a region-specific scope. Under the language/locale policy, forcing a single language without user opt-in is a policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
87% confidence
Finding

The entire skill content is presented only in Chinese, with no indication that the language is optional or that the skill is intended solely for a Chinese-speaking or region-specific audience. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The phrase “回复‘电视墙’” is a broad activation cue embedded in normal content and can easily overlap with ordinary user conversation about TV walls. In a skill system that routes or triggers behaviors based on text patterns, this can cause unintended invocation or retrieval of this skill when the user is merely discussing装修 topics, leading to incorrect context selection or prompt injection surface expansion.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

This file contains user-facing natural-language content only in Chinese, and there is no indication that the skill is region-specific or that users can opt into this locale. Under the policy, forcing a specific language without user choice can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

This markdown file presents all user-facing natural language exclusively in Chinese, and there is no indication that the skill is region-specific or that users can opt into that language. The policy requires flagging language or locale constraints when they are imposed without user choice or justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The entire skill content is written in Chinese and provides no indication that the language is optional, user-selected, or required for a region-specific use case. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file presents all user-facing content in a single language and does not indicate that the skill is region-specific or that users can opt into Chinese. Under the natural-language policy checks, forcing a specific language without user choice can be a locale-policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

The entire skill content is written exclusively in Chinese and provides no indication that language choice is optional or limited to a justified region-specific use case. This can violate language or locale policy when a skill imposes a specific language without user opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

This markdown content forces a specific language/locale for all users, which can violate language-choice policy when no opt-in or alternative is provided. There is no indication that the skill is region-specific or that users can choose another language.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The entire skill content is presented only in Chinese, and there is no natural-language indication that users may choose another language or that the Chinese-only constraint is required for a region-specific purpose. Under the policy, forcing a specific language without opt-in is a locale-policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The natural-language content is exclusively Chinese, and there is no indication that the skill offers users a language/locale option or that it is intentionally restricted to a Chinese-language audience for a documented reason. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

The entire skill file is written in Chinese and assumes a Chinese-speaking audience, with no indication that language selection is optional or that the locale restriction is justified. Under the policy rule, a skill that forces a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

This markdown file presents all user-facing content in a single language without offering any language choice or documenting a justified region-specific constraint. That can violate language/locale policy when users are not given an opt-in or explanation for the enforced locale.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

This markdown file presents all instructional content in a single language without offering any user choice or documenting a justified locale restriction. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The entire skill content is written in Chinese and presents a fixed language/locale with no indication that users can choose another language. Under the policy, forcing a specific language without opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The entire skill content is presented only in Chinese, with no indication that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking or region-specific audience. Under the policy for natural-language violations, forcing a specific language without opt-in is a reportable locale-policy issue.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.