Security audit
Security checks for vulnerabilities and agentic risk
This is a static Chinese-language Suno music prompt guide with no code execution, persistence, credential handling, or hidden data access.
Install this if you want a Chinese-language Suno songwriting and prompt-format guide. Be aware it may answer in a fixed Chinese template and may activate for broad music or prompt-writing requests, but it does not appear to run code or access your data.
The skill description is written entirely in Chinese and presents the skill as a Chinese-language guide without indicating multilingual support or user choice. While not a classic security flaw, this can create behavior that ignores user language preference and may cause misleading or inaccessible outputs in broader deployments.
The trigger conditions are broad enough to activate on common music-related requests such as '写歌' or '提示词', which can cause the skill to hijack user intent when a user did not explicitly ask for this specific SUNO-focused workflow. This is dangerous because it can override more suitable skills or system behavior, leading to incorrect routing, degraded trust, and unintended disclosure of the skill's preset output format into unrelated conversations.
The output template explicitly mandates Chinese-language sections such as '中文释义' and a fixed Chinese structure without offering a language choice. In multi-language environments, this can force responses into an unintended language, causing user-confusion, policy noncompliance with locale expectations, and poor handoff behavior when integrated into larger agent systems.
The manifest description states the skill is a Chinese-language music creation guide ("SUNO音乐创作速查表 - 完整的AI音乐创作指南") with no indication that other languages are supported or that users can opt into this locale. This is a natural-language locale constraint in a user-facing field and may violate language-choice policy when not explicitly optional or justified.
No suspicious patterns detected.
