Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward message-splitting helper with no executable code, credential handling, hidden persistence, or unrelated behavior.
Before installing, confirm you want the agent to split long replies into multiple outbound messages automatically, especially in channels where repeated messages, ordering, or duplicate retries matter. Consider tightening the triggers or adding confirmation for send-failure retries if you use it in public or high-volume messaging channels.
The skill documentation is presented in Chinese with no indication that other languages are supported or that the skill is intended only for a Chinese-speaking or region-specific audience. This can violate language/locale policy because it imposes a specific language without user opt-in.
The description says the skill automatically activates whenever there is a need to send long messages such as reports, plans, or logs, which are very common content types and not a precise invocation scope. Without explicit constraints or negative examples, this broad wording could cause unintended activation in ordinary messaging scenarios.
The skill metadata and documentation are written entirely in Chinese and present the tool as operating in that language without offering a language choice or stating that it is region-specific. This can violate language/locale policy when users have not opted into Chinese-language behavior.
The trigger list includes broad, underspecified conditions such as "multipleSections" and "sendFailure" without defining how these are detected or when the skill should not activate. In a manifest file, this lack of specificity can lead to inconsistent or overly broad activation behavior.
