Security audit
Security checks for vulnerabilities and agentic risk
This is a Kubernetes study-note skill with no executable behavior, but its broad triggers and duplicated Chinese content may make it activate unexpectedly or feel low quality.
Install only if you want a Chinese-language Kubernetes learning helper. Expect possible accidental activation on generic Kubernetes questions unless the trigger wording is narrowed by the publisher.
The description and surrounding instructional content are presented in Chinese, but the file does not indicate that the user opted into Chinese or that the skill is intentionally restricted to a Chinese-speaking context. This can violate language/locale policy when a skill implicitly forces one language without user choice.
The manifest trigger contains generic Kubernetes-related wording and promotional phrases without clear activation constraints, making accidental activation likely for unrelated or general Kubernetes conversations. Ambiguous manifest triggers increase collision risk with other skills and reduce user control over which skill is selected.
The trigger conditions include very broad phrases such as users saying 'Kubernetes' or requesting Kubernetes-related help, which can cause the skill to activate during ordinary platform usage rather than only when explicitly invoked. This creates unintended routing/selection behavior and can expose users to irrelevant or low-quality guidance from this merged skill content.
This duplicated trigger section repeats vague activation rules such as broad skill-name or topic-based invocation, which compounds the chance of accidental activation and increases routing ambiguity. Repetition across merged content suggests the skill was auto-assembled without normalization, making trigger conflicts more likely.
This additional duplicated trigger block again uses unspecific invocation language, preserving the same accidental activation problem even if earlier sections are corrected. Multiple broad trigger blocks can cause maintenance errors and inconsistent downstream enforcement of activation rules.
The final trigger block still includes generic Kubernetes support phrasing, which is likely to collide with normal user requests and unintentionally invoke this skill. Although the content appears educational, generic activators can still degrade routing integrity and user trust.
No suspicious patterns detected.
