Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Chinese-language workflow for creating and publishing HTML guide pages, with no hidden code or persistence, but users should confirm before any GitHub push.
Install only if you want a Chinese-language helper for creating Web UI guide pages. Before letting it run git commit or git push, confirm the target repository, branch, output directory, and whether the generated HTML should be publicly published.
The skill declares mandatory auto-trigger conditions using broad everyday phrases like '创建指南', '操作说明', and '界面介绍'. These terms are common in normal conversation, so the skill can activate unintentionally and take over workflows the user did not explicitly request, creating prompt-routing confusion and increasing the chance of unintended file generation or repository actions.
The manifest description includes broad scenario-based activation text such as creating guides, interface introductions, and import tutorials, but does not define clear limits or disambiguation rules. This makes the skill eligible for many unrelated user requests, which can cause accidental activation and unsafe overreach into tasks involving content generation and publishing.
The skill description is written to enforce Chinese-language behavior and Chinese trigger terms without any indication that language should follow user preference. In multilingual environments this can override expected UX, cause misrouting based on language-specific keywords, and reduce user control over how the agent responds.
No suspicious patterns detected.
