Security audit
Security checks for vulnerabilities and agentic risk
This skill locally generates Chinese interior-design budget spreadsheets and does not show hidden execution, network access, persistence, credential use, or data exfiltration.
Install only if a Chinese-language interior-design budget generator fits your workflow. Review or change the output path before running, and avoid publishing client names, private template paths, addresses, or phone numbers in generated examples or shared copies.
The skill documentation exposes a specific absolute local filesystem path that reveals personal naming, directory structure, and business context tied to financial files and client/project information. Even without direct file contents, this leaks sensitive environmental details that can aid social engineering, targeted reconnaissance, or accidental disclosure of confidential client and financial data.
The docstring and all user-facing prompts are written in Chinese, so the skill effectively requires Chinese-language interaction. There is no indication that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking or region-specific context.
The manifest description is written entirely in Chinese and presents the skill as producing budget quotation output for Chinese-language use, while the metadata also tags the skill as "chinese". For an all-file-types policy check, this indicates a locale/language constraint without any stated user choice, opt-in, or justification as a region-specific tool.
The file presents all user-facing instructions exclusively in Chinese, which can constitute a language-policy issue if the skill environment expects language choice or neutrality. There is no note that the skill is intended only for Chinese-speaking users or that language selection is configurable.
No suspicious patterns detected.
