Security audit
Security checks for vulnerabilities and agentic risk
This skill is a documentation helper that reads project code to map a feature implementation and does not show hidden execution, persistence, credential handling, or destructive behavior.
Reviewers should expect this skill to inspect relevant source code and produce Chinese-formatted technical documentation unless instructed otherwise. It appears safe for normal use in a codebase where that level of source inspection is acceptable.
The manifest description and the main skill instructions are entirely written in Chinese and describe the generated artifact as a technical development document, but there is no indication that the user can choose another language. This creates a natural-language locale constraint without opt-in, which matches the policy-violation category for language or locale restrictions.
This markdown template is entirely written in Chinese and instructs users to generate documentation using that template, which implicitly enforces a specific language. The file does not mention any language option, opt-in, or region-specific justification, so it appears to violate the language/locale choice policy.
