Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed public trend-research helper, with no executable code or hidden persistence, though its triggers are broad and its language defaults are inconsistent.
Before installing, be aware that generic phrases like 'what's trending' or 'market research' may activate the skill, and the default SKILL.md report template uses Chinese headings. It should only need public web/API access for trend research.
The trigger phrases are broad, generic prompts such as 'market research...' and 'what are people saying about...', which can easily appear in ordinary conversation and unintentionally activate the skill. This increases the chance of unexpected tool use, data fetching, or context switching without the user's clear intent, especially in environments where multiple skills compete for activation.
The description advertises triggers like 'trending', 'market research', and 'what's hot', which are generic phrases likely to appear in ordinary conversation outside the intended skill context. The file does not provide clear scope limits or exclusion conditions to distinguish when these phrases should or should not invoke the skill.
The quick usage example is presented as a Chinese command form, and the output template later uses Chinese headings and labels, indicating a default language constraint. The file does not say that users may choose their preferred language or that Chinese output is optional or region-specific.
The mandated output template uses Chinese section titles such as '趋势报告', '核心发现', and '行动建议', which effectively enforces a specific language for responses. No alternative language option or user-choice mechanism is described.
Phrases such as 'what's trending in...', 'market research on...', and especially '热门...' are broad and could match many unrelated user requests. The trigger section does not narrow the context, provide an explicit activation rule, or include negative examples to prevent accidental invocation.
No suspicious patterns detected.
