Security audit
Security checks for vulnerabilities and agentic risk
This is a small advisory skill that gives minimalist business-decision feedback and does not include code, credential handling, persistence, or hidden system changes.
Before installing, be aware that this skill may activate for a wide range of business advice requests and may present bilingual context. It appears safe from a security standpoint because it only provides decision-review guidance and does not run code, access private data, or persist changes.
The description says to use the skill when someone wants a gut-check on a business decision, wants to simplify their approach, or needs to decide between options. These triggers are very broad and overlap with common advisory conversations, without clear boundaries or exclusion conditions to distinguish when this skill should or should not activate.
This markdown includes bilingual content and headings, but it does not state whether language presentation is user-selectable or optional. Under the language/locale policy rule, forcing or assuming a locale without opt-in can be a natural-language policy concern.
The file presents the skill explanation in Chinese and then continues with core operating instructions in English, but it does not tell the user which language the skill will use or offer a choice. This can create an implicit language policy that is unclear and may not align with user preference.
