Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Chinese-language search helper that sends user search queries to disclosed search engines and does not show hidden execution, persistence, credential access, or local data access.
Install this if you want a Chinese-focused search workflow and are comfortable with your search terms being sent to the listed external search engines. Consider narrowing or removing the broad "搜索" trigger if you only want explicit Chinese-search activation.
The changelog is entirely written in Chinese and provides no indication that users may select another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the language/locale policy, forcing a specific language without opt-in or clear justification is a natural-language policy concern.
The manifest description and title present the skill as a Chinese-only search tool, and the instructions are written entirely in Chinese without any indication that users may choose another language or locale. Under the policy, forcing a specific language or locale without opt-in is a natural-language policy violation unless the constraint is explicitly justified.
The skill is explicitly oriented around Chinese search engines and Chinese-language triggers, but the configuration does not indicate any user opt-in, locale check, or consent gate before routing queries to those providers. This can cause user requests to be handled in an unintended language or jurisdictional/search ecosystem, which may affect privacy expectations, relevance, and downstream safety controls.
The trigger phrase "搜索" is overly generic and can cause the skill to activate for many unrelated requests that merely mention searching. Because this skill has web_search and web_fetch capabilities, unintended activation can lead to unnecessary external requests, context capture, and user confusion about which tool is handling the query.
The file is entirely framed as a Chinese search enhancement usage guide and only demonstrates Chinese-language search workflows, with no indication that users may choose another language or locale. This can conflict with organizational language/locale policies when a skill implicitly requires a specific language without user opt-in.
The skill name and summary describe the tool exclusively as a Chinese search enhancer for Chinese-content search, with no indication that users can choose another language or locale. Under the policy, forcing a specific language or locale without opt-in is a natural-language policy concern unless the restriction is clearly documented and justified as region-specific.
No suspicious patterns detected.
