Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Langflow reference skill with broad trigger wording but no code, install steps, credential use, persistence, or hidden actions.
Before installing, consider whether Chinese-language trigger phrases and broad workflow terms fit your environment; the reviewed artifact itself is informational and does not ask to run code or access sensitive data.
The trigger phrases are generic terms like "langflow," "可视化工作流," and "流程构建," which can plausibly appear in ordinary user conversations that are not actually requests to invoke this skill. This can cause unintended skill activation, leading the agent to route user requests into the wrong capability, produce irrelevant responses, or expose skill-specific behavior without clear user intent.
The file presents core descriptive content in both English and Chinese and later defines trigger phrases only in Chinese, but it does not state whether the skill supports multiple languages or let the user opt into a preferred language. This can create an implicit language/locale bias in how the skill is discovered or described.
No suspicious patterns detected.
