Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed content-audit rubric with minor usability and data-access cautions, but no evidence of hidden, destructive, or persistent behavior.
Install only if you want a structured EEAT/CORE/GEO content audit workflow. Prefer pasted content or exact URLs/paths, and avoid giving it private files unless you intend the agent to read and analyze them.
The trigger phrases are broad enough to match ordinary requests for writing feedback, optimization, or assessment, which can cause the skill to activate outside its intended niche. Over-broad activation can steer users into a rigid scoring workflow they did not request and may increase exposure to other risky behaviors in the skill, such as processing URLs or file paths unnecessarily.
The skill explicitly supports auditing user-provided URLs and file paths but does not require a user-facing consent step or safety warning before accessing external or local content. In an agentic environment, this can lead to unintended retrieval of sensitive local files or untrusted remote resources, creating privacy, data exposure, or SSRF-style access risks depending on the runtime's capabilities.
SQP-3 applies to all file types and covers language or locale policy violations. This document is primarily in English but includes untranslated Chinese text such as '混乱', which can force a language expectation on readers without opt-in or explanation.
SQP-3 applies to all file types and covers language or locale policy violations. This document is primarily in English but includes untranslated Chinese text such as '混乱', which can force a language expectation on readers without opt-in or explanation.
SQP-3 applies to all file types and covers language or locale policy violations. This document is primarily in English but includes untranslated Chinese text such as '混乱', which can force a language expectation on readers without opt-in or explanation.
SQP-3 applies to all file types and covers language or locale policy violations. The line contains Chinese text ('不超过') embedded in otherwise English guidance, creating an implicit language requirement without user opt-in or locale justification.
SQP-3 applies to all file types and covers language or locale policy violations. This document is primarily in English but includes untranslated Chinese text such as '混乱', which can force a language expectation on readers without opt-in or explanation.
SQP-3 applies to all file types and covers language or locale policy violations. This document is primarily in English but includes untranslated Chinese text such as '混乱', which can force a language expectation on readers without opt-in or explanation.
SQP-3 applies to all file types and covers language or locale policy violations. This document is primarily in English but includes untranslated Chinese text such as '混乱', which can force a language expectation on readers without opt-in or explanation.
SQP-3 applies to all file types and covers language or locale policy violations. The line contains mixed-language wording ('前后consistent') inside an otherwise English standard, which imposes an unexplained locale expectation on users.
SQP-3 applies to all file types and covers language or locale policy violations. The line includes untranslated Chinese text ('次数') in an otherwise English document, with no language-selection option or locale rationale.
SQP-3 applies to all file types and covers language or locale policy violations. The line contains mixed-language wording ('前后consistent') in an otherwise English recommendation, forcing a language assumption without user opt-in or explanation.
SQP-3 applies to all file types and covers language or locale policy violations. The line includes untranslated Chinese text ('集中在') in otherwise English content, without any documented language choice or locale constraint.
The note says the skill primarily serves Chinese users, which establishes a locale preference in natural language. Because the file does not explicitly state that users may choose another language or output locale, this can be read as a default language policy without opt-in.
No suspicious patterns detected.
