Security audit
Security checks for vulnerabilities and agentic risk
This skill is a Chinese tutorial-report generator whose web searches and local HTML output are disclosed and fit its stated purpose.
Install this if you want Chinese-language tutorial reports generated from web search results. Be aware that prompts matching broad tutorial phrases may trigger searches and create an HTML report in the workspace, so avoid using it for private tool names or sensitive internal topics unless you are comfortable with those search queries being sent externally.
The trigger conditions are broad enough to activate on many ordinary tutorial-related requests, which can cause the skill to run unexpectedly without clear user consent. Because the skill then performs external searches and writes an HTML file, accidental activation expands both data exposure and unintended side-effect risk.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
</head>
<body>
<!-- 左侧目录 -->
<nav class="toc">
<div class="toc-title">📑 目录导航</div>
<ul class="toc-list">
The manifest description includes a dense list of trigger phrases but does not define firm activation boundaries, making routing ambiguous and increasing the chance of unintended invocation. This is especially risky because the skill's behavior includes multi-site searching and workspace file creation, which are more invasive than a simple conversational response.
The description specifies aggregation from Chinese internet platforms and generation of a Chinese tutorial report, which imposes a language/locale choice by default. The file does not indicate user opt-in or an option to choose another language, which can violate language/locale policy requirements.
The user-facing description does not clearly disclose that the skill will automatically query multiple external platforms and save a generated HTML artifact to the workspace. Missing disclosure undermines informed consent and can surprise users with network activity and persistent file creation they did not expect.
The workflow and design instructions consistently assume Chinese platforms and a Chinese report style, reinforcing a fixed locale behavior. Because no alternative locale or opt-in mechanism is offered, the skill appears to force a language/region preference.
The HTML document is explicitly fixed to the zh-CN locale via the lang attribute, and the visible UI text throughout the template is also written in Chinese. This imposes a specific language/locale on all generated output without any opt-in, fallback, or documented region-specific constraint, which matches the language/locale policy violation criteria.
This markdown file contains user-facing instructional content exclusively in Chinese, starting from the title and continuing throughout the document. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is explicitly documented and justified.