Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese-language guide skill with no executable code, persistence, credential access, or hidden behavior.
Before installing, consider whether the broad triggers could be annoying in normal conversations and whether Chinese-only guidance fits your workflow; there is no evidence of code execution, data access, persistence, or hidden behavior.
The trigger conditions are very broad because they activate on generic terms like "Hermes" and "skill-learner," which can appear in many unrelated conversations. This can cause unintended skill invocation, leading to context hijacking or inappropriate responses when the user did not actually request this skill.
The natural-language content of the skill, including its description, steps, and trigger scenarios, is entirely in Chinese with no indication that users may choose another language. This can conflict with language or locale policy requirements when no user opt-in or documented locale restriction is provided.
