Security audit
Security checks for vulnerabilities and agentic risk
This skill appears benign: it only documents a Chinese-language question collection workflow and ships a tiny script that prints usage text.
Installers should understand that this appears to be a Chinese-language, mostly documentation-only skill. It currently does not implement the advertised add/list/analyze commands beyond printing usage, so evaluate it as a lightweight template rather than a complete workflow.
The manifest description and the visible user-facing sections of the skill are entirely in Chinese, which imposes a specific language on users without indicating that other languages are supported or optional. Under the policy, locale or language constraints should either be optional or clearly justified.
The script prints its title and usage instructions only in Chinese, which imposes a specific language on users without any opt-in or indication that the skill is intended for a Chinese-only context. This matches the policy category for language or locale constraints expressed in natural-language content.
