Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple local academic paper template helper, with minor quality and disclosure issues but no evidence of malicious or high-impact behavior.
Before installing, understand that this appears to be a basic local template generator rather than a full academic research workflow. It saves paper templates as JSON files in its own data directory and includes Chinese-language instructions and video references.
The file prominently presents the skill name and description in Chinese only on this line, with no indication that users may choose another language or locale. This can violate language/locale policy expectations when a skill imposes a specific language without user opt-in.
The module documentation says this implements an academic research workflow covering plan, research, write, and review, and the run() docstring similarly describes running that workflow. In reality, the code only constructs a fixed set of paper sections, optionally reloads a prior JSON file, and writes the template back to disk without performing planning, research, or review steps.
No suspicious patterns detected.
