Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent pre-publication review checklist for ClawHub skills/plugins and does not show hidden execution, persistence, exfiltration, or destructive behavior.
Install this if you want a Chinese-language ClawHub publishing readiness reviewer. Expect it to read package files and suggest validation or dry-run ClawHub commands; formal publishing still requires explicit user confirmation.
Referenced artifact was not completely inspected
以最小读取成本完成上线闸门：验证 `SKILL.md` 与 frontmatter、名称/slug/版本一致性、首屏价值、分类与示例、明显安全问题，以及匹配对象类型的 dry-run 前置项。结论使用 `可以发 / 补完再发 / 先别发`，最多列 3 个关键问题和最小补法。
The user-facing natural-language instructions from L023 onward are written entirely in Chinese, including invocation guidance, workflow, and output contract, with no indication that language is optional or user-selectable. This can violate language/locale policy because it implicitly constrains the skill to a specific language without explicit opt-in or a documented regional requirement.
The entire skill file is written in Chinese and does not indicate that language selection is optional or limited to a China-specific/regional workflow. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
This markdown template appears to require Chinese for all report fields and headings, which can impose a fixed language on users without opt-in. Under the policy, forced language or locale is a natural-language policy violation unless the file explicitly offers a choice or justifies the locale constraint.
Line L39 states the store-page summary was changed to a '中英混合短描述' (mixed Chinese-English short description). Because SQP-3 applies to natural-language policy issues in any file, this can be a locale/language policy concern if users are not given a language choice or the multilingual constraint is not explicitly justified.
SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all instructions and conclusions exclusively in Chinese, and there is no indication that the skill is region-specific or that users can opt into another language.
This markdown file presents all guidance exclusively in Chinese, which may impose a language/locale constraint on users without explicit opt-in. The stated policy flags natural-language locale restrictions unless the skill offers a language choice or clearly documents why the locale limitation is required.
SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all guidance only in Chinese, with no indication that the user can choose another language or that the restriction is justified by a region-specific requirement.
No suspicious patterns detected.