Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed photography guidance skill with no code execution, data access, persistence, or privileged behavior.
Before installing, note that this skill is mainly written in Chinese and may steer responses toward that language unless the agent follows the user's language preference. Security-wise, it is a low-risk educational prompt skill.
The manifest-style description and trigger list hard-code both Chinese and English phrasing, but the skill does not state whether users may interact in their preferred language or whether multilingual triggering is optional. Under the policy rule, language handling should either be explicitly user-selectable or clearly justified as a locale-specific skill.
This JSON file contains natural-language expectations that require the skill response to be in Chinese even when the user prompt is in English. That can violate a language/locale policy because the file does not indicate any user opt-in or justified locale restriction.
No suspicious patterns detected.
