Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent HR reference skill, but users should verify its payroll and attendance formulas before using them for real employment decisions.
Install only if you want a Chinese/PRC-oriented HR reference pack. Treat its legal tables, payroll calculations, and Excel/VBA snippets as templates, not authoritative outputs; verify local law, company policy, and the attendance formulas before using them with employee data.
The skill description and most triggers are written in Chinese, presenting the skill as operating in a specific language/locale, but the file does not indicate that this is optional or user-selectable. Under the policy, locale or language restrictions should either be user opt-in or clearly documented as justified for a region-specific tool.
The trigger list includes many generic HR terms such as 'HR', '人事', '工资', and '招聘', making the skill likely to activate for ordinary conversations that may not need this specific skill. Over-broad activation is a security and safety issue because it increases unnecessary exposure to the skill's instructions, formulas, and automation snippets in unrelated contexts.
The attendance formula comment labels COUNTIF(...,"<9:00") as 'late count', but that condition actually counts punches earlier than 9:00, not later. In an HR/payroll skill, this can directly distort attendance, disciplinary actions, and wage deductions, creating compliance and employee-relations risk if copied into real spreadsheets.
