Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese-language article-writing skill with no bundled executable code or hidden persistence, though batch file output should be used with care.
Before installing, confirm you want a Chinese-language content generation skill that may create multiple article files when batch generation is requested. Use a new dedicated output folder and review generated content before publishing.
The skill explicitly supports batch article generation to a user-specified output directory but provides no safety guidance about file creation, overwriting existing files, or validating target paths. In an agent setting, this can lead to unintended bulk writes, clobbering existing content, or writing into sensitive directories if the path is passed through without safeguards.
SQP-3 applies to natural-language policy issues in any file type. The documentation and command interface are fully Chinese-language, with no note that other languages are supported or that Chinese is an intentional region-specific constraint, which can constitute a language/locale policy violation.
The display name and description are written only in Chinese, which suggests a fixed language/locale experience. The file does not indicate that users can choose another language or that the skill is intentionally limited to a Chinese-only regional context.
No suspicious patterns detected.
