Security audit
Security checks for vulnerabilities and agentic risk
This is a text-only business-advice skill for early customer sales, with no executable code or privileged behavior.
Install this if you want business-advice prompts for finding and selling to early customers. Be aware it may activate on early-sales questions and includes bilingual English/Chinese documentation, but it does not request privileged access or run code.
The manifest description is broadly worded enough to activate on many generic business-advice requests, which can cause the skill to trigger outside its intended niche. Overbroad activation increases the chance of irrelevant instruction injection into conversations, reducing routing integrity and potentially displacing better-scoped skills.
The file presents core skill description and section headings bilingually with Chinese text, but it does not state that language presentation is optional or user-selected. Under the policy rule, imposing a specific language/locale format without opt-in can be a natural-language policy concern unless clearly justified as region-specific.
The file presents the skill description section in Chinese ('技能说明（中文）') even though the rest of the document is in English, and there is no indication that the user opted into Chinese or that the skill is region-specific. This creates a natural-language locale policy concern because the skill imposes a language choice without documenting user preference or necessity.
No suspicious patterns detected.
