Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward photography guidance skill about natural light direction, with no code execution, data access, persistence, or hidden high-impact behavior.
Before installing, consider that the skill appears primarily written for Chinese-language photography guidance, though it also lists English triggers. It is otherwise low risk based on the inspected artifacts.
The file’s natural-language content is entirely in Chinese and references a Chinese-titled source book, indicating the skill is designed around a fixed language context. There is no indication that users can choose another language or that the locale restriction is explicitly documented as an opt-in or region-specific constraint.
The manifest description and trigger list present activation language in both Chinese and English, but do not clarify whether the skill is intended to operate bilingually by default or based on user preference. This can create a language/locale policy concern if the organization expects the agent to respect the user's chosen language unless explicitly opted into another one.
No suspicious patterns detected.
