Security audit
Security checks for vulnerabilities and agentic risk
This is a small Chinese-language rubric analysis skill that locally reads clipboard text when invoked, with no evidence of network access, persistence, or hidden behavior.
Install only if you are comfortable with a Chinese-language workflow that reads your macOS clipboard on request. Before invoking it, make sure the clipboard contains only the rubric, assignment, or draft text you want analyzed, not passwords, tokens, private messages, or unrelated confidential material.
The natural-language instructions and invocation examples require Chinese comprehension, which effectively forces a specific language for users. The file does not offer an opt-in language choice or explain that the skill is intended only for a Chinese-language environment.
This script reads the system clipboard and prints its full contents, even though clipboard access is not clearly necessary for a rubric gap analysis skill. Clipboard data often contains unrelated sensitive information such as passwords, tokens, personal data, or confidential work product, so collecting it without tight scoping creates an unnecessary data-exposure path.
The code accesses the clipboard and then emits the entire clipboard contents to stdout with no confirmation or warning. That behavior can leak sensitive clipboard data into logs, terminal scrollback, parent processes, or other tooling integrations, turning a local privacy issue into broader unintended disclosure.
The changelog entries are presented exclusively in Chinese, which can constitute a language/locale policy issue when no opt-in, alternative language, or justification is provided. The file does not explain that the skill is region-specific or that Chinese is an intentional documented constraint.
The error message is hard-coded in Chinese, which imposes a specific language on users without opt-in or explanation. This can violate language or locale policy when the skill is not explicitly documented as Chinese-only or region-specific.
