Security audit
Security checks for vulnerabilities and agentic risk
This is a documentation-only code-optimization skill with no install actions or executable payload, though its broad trigger phrases may activate more often than users expect.
Before installing, consider whether you want a Chinese-language code review workflow that may trigger on generic code-improvement requests. Review suggested edits before applying them, especially for larger or sensitive codebases.
The skill’s natural-language description is presented entirely in Chinese and the usage content consistently assumes Chinese-language interaction, but there is no indication that language selection is optional or that the skill is intentionally region-specific. Under the policy, forcing a specific language without user opt-in is a locale-policy issue.
The activation phrases are broad generic requests like '改进代码' and '自动调优', which are likely to match ordinary coding-help prompts rather than a clearly intentional invocation of this skill. That can cause unintended activation, making the agent apply iterative transformation logic in contexts where the user only wanted lightweight assistance, increasing prompt-routing confusion and potentially amplifying unsafe or undesired code changes over multiple rounds.
No suspicious patterns detected.
