Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed, user-directed internal contact lookup workflow, but users should treat the returned employee contact details as sensitive company information.
Install only if you are authorized to access the referenced OA address book and to retrieve employee directory details. Because the skill can expose names, employee IDs, desk phones, and mobile numbers from an authenticated company system, use it for specific approved lookups and avoid sharing results outside the intended business context.
The file’s natural-language content directs usage entirely in Chinese and provides no indication that users may interact in another language. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly documented and justified.
No suspicious patterns detected.
