Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese Markdown guide with no code, install steps, persistence, or sensitive access.
Installation appears low risk. Be aware that its broad trigger terms may make it appear during unrelated skill or how-to requests, so narrowing the trigger would improve usability.
The trigger string includes very generic terms such as '如何使用' and 'skill', which can match ordinary user requests unrelated to this specific skill. Overbroad activation can cause the wrong skill to run, leading to unintended instruction injection into unrelated conversations and reducing routing safety.
The activation rule says the skill should trigger when the user 'needs skill-validator related help' without defining what qualifies as related. This ambiguity increases the chance of accidental invocation, which can override more appropriate skills or inject irrelevant guidance into normal user interactions.
Natural-language content throughout the file assumes Chinese as the required interaction language, but there is no opt-in, alternative language option, or explanation that the skill is intended for a Chinese-only audience. This can violate language or locale policy when a skill forces a specific language implicitly.
