Security audit
Security checks for vulnerabilities and agentic risk
This is a narrowly scoped PPT-generation skill for a specific Chinese corporate template, with only ordinary local file creation disclosed in its instructions.
Install this if you specifically want PPTs generated in this company's Chinese corporate style. Be aware that it writes generated decks to a fixed local output path and may activate on generic PPT-making requests, so confirm the intended template and output location when using sensitive content.
The trigger phrases are broad everyday requests such as “做PPT/生成PPT/帮我做个PPT”, which can cause the skill to activate in many ordinary contexts without strong scoping to the intended corporate template workflow. Over-broad activation increases the chance of unintended file generation or applying this skill when the user did not explicitly intend to use this company-specific PPT generator.
The skill explicitly writes a PPTX file to a workspace path, but the user-facing description does not clearly disclose this file-creation side effect before use. This can lead to surprising persistence of generated content, confusion about where sensitive material is stored, and reduced user awareness of local artifact creation.
Lines L037-L040 prescribe Chinese font usage as the default standard, and the document overall defines presentation content conventions entirely in Chinese. For a general template spec, this imposes a specific language/locale without any user opt-in or documented justification that the template is restricted to a Chinese-only or region-specific use case.
Lines L054-L057 require the directory page title to be "目录" or "内容", and elsewhere the document requires a fixed Chinese slogan. This is a natural-language locale constraint that is presented as mandatory rather than optional or context-limited.
No suspicious patterns detected.
