Security audit
Security checks for vulnerabilities and agentic risk
This is a text-only Dao De Jing reflection skill with disclosed bilingual output and no evidence of hidden execution, data access, persistence, or privilege use.
Installers should expect reflective guidance, not factual answers or professional advice. The main practical consideration is that responses may include both Chinese source text and English interpretation by default.
The description states the skill returns insights 'in plain English' and labels the skill '中英双语,' indicating a fixed language behavior. Because the file does not present this as an explicit user-selectable option, it may violate language/locale policy by imposing a specific output language format without opt-in.
The self-checklist says 'Bilingual output (Chinese + English) is complete and accurate,' which makes bilingual output a mandatory execution requirement. This is a natural-language policy concern because it does not offer the user a language choice or indicate that bilingual formatting is optional.
The README states '中英双语' and later describes the output as including 'Classical Chinese + English,' which suggests the skill forces a specific language/locale format. The policy for this audit flags language constraints unless the skill offers user choice or clearly documents a justified regional requirement.
No suspicious patterns detected.
