Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language personal productivity advice skill that returns static guidance and does not access files, credentials, network services, or persistent state.
Install this if you want Chinese-language productivity and time-management coaching. Be aware it may occasionally trigger on broad Chinese planning or task words; users who expect English responses or very narrow activation may find the current routing too broad.
The trigger description is broad enough to activate on many ordinary conversations about productivity, focus, planning, or procrastination. Overbroad routing can cause the wrong skill to take control, leading to irrelevant guidance, prompt-surface expansion, and reduced reliability of downstream behavior even if the skill is not overtly malicious.
SQP-3 applies to all file types. The natural-language strings throughout the file are Chinese-only, and the skill introduces itself and responds in Chinese without any opt-in or alternative language path, which can violate language/locale choice expectations.
The package description is entirely in Chinese, which indicates the skill is presented as Chinese-language-specific without any stated user choice or opt-in. Under the policy, language constraints should either be optional for the user or clearly justified as region-specific.
The skill is presented primarily in Chinese without clearly stating language scope or offering a language fallback. This can cause misrouting or user confusion when invoked for users expecting another language, which may degrade safety-relevant comprehension of advice and instructions.
This is a code file, so SQP-2 applies. The matcher activates on broad terms such as '忙', '计划', '日程', and '事', but there is no confirmation prompt, logging, or inline disclosure explaining that ordinary conversation may trigger the skill; this is a user-impacting behavior in a conversational agent even though it is not destructive.
No suspicious patterns detected.
