Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward learning-distillation skill that only uses disclosed file-reading or web-fetching when the user provides material to process.
Install this if you want a structured learning aid for text, files, and URLs. Be mindful that giving it a local path or URL asks the agent to read or fetch that material, and mixed-language inputs may produce Chinese output by default.
The trigger phrase "distill this" is broad enough to match ordinary conversational text rather than a clearly intentional skill invocation. In systems that auto-activate skills from natural language, this can cause unintended execution with subsequent file reads or web fetches based on nearby user-provided content, increasing the chance of overreach or surprise tool use.
The phrase "extract the framework from" is ambiguous and lacks boundaries around what input qualifies, making accidental triggering plausible in normal conversation. Because the skill can invoke Read and WebFetch depending on parsed input type, ambiguous activation can lead to unintended access of local files or remote content when the user did not mean to invoke the skill.
SQP-3 applies to all file types, including markdown instructions. The rule "Mixed → Chinese output" imposes a specific language choice based on input composition rather than user preference, which is a natural-language locale policy violation under the stated criteria.
