Security audit
Security checks for vulnerabilities and agentic risk
This is a simple pricing-advice skill with no code, persistence, credential use, or hidden high-impact behavior.
Reviewers may want clearer activation boundaries and an explicit note that users can interact in their preferred language, but installation does not expose sensitive data or grant unusual authority based on the inspected artifacts.
The description says to use the skill when someone is 'setting prices, considering price changes, or struggling with what to charge,' which is broad natural language rather than a specific trigger or constrained activation condition. It does not provide negative examples or contextual limits, so the skill could be invoked in ordinary business conversations more often than intended.
The file presents part of the skill instructions in Chinese while the rest is in English, but it does not state that language selection is user-driven or that the skill is intended for a Chinese-only audience. This can conflict with a language/locale policy requiring user opt-in or explicit justification for language constraints.
This markdown file includes Chinese alongside English as part of the skill description, which may impose a specific language/locale presentation without explicitly offering user choice. The policy specifically calls for flagging language or locale constraints unless the skill offers opt-in or clearly documents the justification.
No suspicious patterns detected.
