Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese Xiaohongshu copywriting helper for interior designers, with no evidence of hidden access, persistence, data theft, or destructive behavior.
Install this if you want Chinese-language Xiaohongshu marketing copy for interior-design content. Be aware that the generic “内容策划” trigger may activate it for broader content-planning requests, and review generated marketing copy before publishing.
The trigger phrase “内容策划” is very broad and can match many ordinary user requests unrelated to this specific skill, causing unintended invocation. Overly generic triggers increase the attack surface for prompt-routing mistakes, user confusion, and accidental activation in unrelated contexts, though this is not inherently malicious in this marketing-content skill.
The module docstring and prompt template are entirely in Chinese and instruct the model to generate Xiaohongshu copy in that language/style, but the skill never offers a language or locale choice. This is a natural-language policy concern because it imposes a specific language by default rather than making it opt-in or clearly documenting a justified regional restriction.
The natural-language instructions, examples, and interface cues all assume Chinese usage, which can be interpreted as forcing a specific language without explicitly offering a user choice. Under the policy, language constraints should either be optional or clearly documented as a justified locale-specific limitation.
The skill name and description are entirely in Chinese and describe a copywriting assistant specifically for Xiaohongshu content, with no indication that users can choose another language or locale. This can conflict with language/locale policy expectations when a skill implicitly constrains interaction to a specific language without explicit opt-in.
No suspicious patterns detected.
