Security audit
Security checks for vulnerabilities and agentic risk
This is a benign debugging checklist that tells agents to reproduce bugs with tests, make minimal code and test changes, and document the fix.
Install this if you want an agent to follow a strict test-first bug-fixing process. Be aware that most instructions are in Russian, and that using the skill during debugging will normally involve reading related code, adding or updating tests, changing bug-related code, running tests, and documenting the fix.
The README presents the skill entirely in Russian, including its title/description and usage guidance, with no indication that users may choose another language. This can violate language/locale policy when a skill forces a specific language without user opt-in.
Suspicious Unicode normalization or mixed-script content
The manifest metadata at L003-L004 is in English, but the substantive operational instructions from L014 onward are written in Russian and presented as mandatory protocol text. This creates a language/locale policy concern because the skill effectively requires Russian comprehension without opt-in, alternative language support, or any stated region-specific justification.
