Security audit
Security checks for vulnerabilities and agentic risk
This skill appears benign: it helps create workplace PPT reports from user-provided materials using a disclosed, confirmation-gated workflow.
Install this only if you are comfortable letting the agent read the specific knowledge base, work records, resume fields, templates, spreadsheets, and images needed for the PPT task. Review generated slides and speaker notes for sensitive personal or company information before sharing, and note that the skill is written for Chinese-language workplace report workflows.
The file presents the skill entirely in Chinese and includes explicit Chinese-only workplace phrasing guidance, but nowhere offers the user a choice of language or states that Chinese is optional. This creates a natural-language locale restriction that could conflict with organizational language policy when users or environments expect another language.
The skill metadata and default prompt are written entirely in Chinese and implicitly steer interaction into Chinese without checking the user's language preference. This can reduce user comprehension, weaken informed consent for file access and generation steps, and increase the chance of misunderstandings in a workflow that processes potentially sensitive workplace documents.
This markdown file presents all instructions, labels, and guidance exclusively in Chinese. Under the stated policy, forcing a specific language without offering the user a language or locale choice is a natural-language policy violation unless clearly justified as region-specific, which is not documented here.
This markdown file presents all instructions exclusively in Chinese and does not offer an alternative language or state that the skill is intended only for Chinese-speaking users. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The entire skill document is written as a mandatory Chinese-language page contract and provides no indication that users may choose another language or locale. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy violation unless the regional constraint is explicitly justified.
The entire skill file is written in Chinese and does not indicate that language selection is optional or constrained to a China-specific workflow. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.
No suspicious patterns detected.
