Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese-language product-research guidance skill with no executable code, install steps, persistence, or hidden authority.
Install this only if you want a Chinese-language ecommerce product-research helper. Treat its market, profit, and supplier suggestions as advisory and verify them independently before spending money or contacting suppliers.
The description, headings, examples, and output are entirely in Chinese, and the file does not indicate that language selection is optional or that the skill is intentionally restricted to a Chinese-speaking region. Under the policy, forcing a specific language without user opt-in is a natural-language policy issue.
The skill exposes broad, natural-language invocation examples such as general shopping, market-analysis, and sourcing requests without defining tight trigger boundaries, exclusions, or disambiguation rules. In an agent environment, this can cause unintended auto-invocation during ordinary conversation, leading to unwanted tool use, data lookups, or workflow hijacking even though the content is not overtly malicious.
