Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese WeChat content-writing skill with no executable code or persistence; its broad trigger and auto-post wording are worth noting but not high-risk.
Install this if you want Chinese WeChat-style article drafting. Be aware that the name suggests auto-posting, but the inspected skill only drafts and outputs content; review any generated content manually before publishing, especially for policy-sensitive topics.
The trigger conditions are broad and include generic requests such as creating social media content, which can cause the skill to activate outside its intended微信公众号 scope. Over-broad activation increases the chance of unintended routing, prompt hijacking of unrelated tasks, or accidental use of this skill in contexts where its behavior is inappropriate.
All user-facing natural-language instructions in the skill are Chinese-only, and the file does not indicate that the language is optional or that the skill is intentionally restricted to Chinese-speaking users or a China-specific deployment. Under the stated policy, forcing a specific language without user opt-in is a locale-policy concern.
