Security audit
Security checks for vulnerabilities and agentic risk
This skill is a Chinese Xiaohongshu content-template generator with broad activation wording but no hidden access, persistence, network calls, or destructive behavior.
Install if you want Chinese-language Xiaohongshu content drafts. Review generated posts before publishing, especially for regulated topics such as medical, legal, financial, political, or pricing claims, and be aware that generic Xiaohongshu writing prompts may route to this skill.
The trigger phrases listed are very broad generic requests such as '生成小红书内容' and '写小红书文案', which are likely to appear in ordinary user prompts even when the user did not intend to invoke this specific skill. This can cause unintended activation and prompt interception/override behavior, especially because the skill targets a common writing task rather than a narrow specialized workflow.
The usage examples encourage activation from natural-language requests that are indistinguishable from normal assistant interactions, reinforcing ambiguous routing conditions. In systems with multiple skills or default assistants, this increases the chance that routine content-writing prompts are captured by this skill unexpectedly, which can lead to incorrect tool selection or policy bypass in mixed-skill environments.
This code embeds user-facing descriptions, templates, usage examples, and generated output entirely in Chinese, indicating the skill forces a specific language/locale. The policy allows locale constraints only when clearly documented and justified or when users are given a choice, which is not present here.
The manifest description and trigger phrases are entirely in Chinese and the rest of the skill content is also Chinese, but there is no statement that the skill is Chinese-only or that users may choose another language. This can be a language/locale policy issue because the skill appears to force a specific language without opt-in or justification.
No suspicious patterns detected.
