Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward photography timing guide with no code, permissions, persistence, or data access.
Installers should expect a Chinese-first photography reference with some English trigger phrases. Review it for usefulness in your preferred language, but it does not appear to access data, run commands, install dependencies, or persist changes.
This manifest-like JSON file contains only Chinese prompts and expected behaviors, indicating the skill is designed to activate and respond in Chinese. Under the policy rules, forcing a specific language without offering user choice or documenting a justified locale restriction is a natural-language policy violation.
The manifest description and trigger section present activation guidance in both Chinese and English, but the file does not explain whether the skill should activate based on user language preference or offer an explicit language choice. Under the policy rule for language/locale constraints, undocumented language behavior can create ambiguity about how the skill applies across users.
No suspicious patterns detected.
