Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward Chinese-language data analysis skill with no bundled executable code, persistence, credential handling, or hidden behavior.
Install this if you want a Chinese-language data analysis helper. Review data before sharing it with the agent, especially database/API sources or sensitive spreadsheets, and choose output paths deliberately because the skill says charts default to a D: drive location.
The manifest description includes broad trigger phrases such as '数据分析、图表、统计、报表、可视化' that are common in ordinary user conversations. This can cause the skill to activate outside narrowly intended contexts, increasing the chance it handles unintended files, data sources, or requests and expands its effective attack surface.
The manifest and usage instructions consistently assume Chinese-language interaction, but the file does not state that the skill is region-specific or provide an opt-in language/locale choice. This can violate language or locale policy when users are implicitly forced into a single language without consent.
No suspicious patterns detected.
