Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language ecommerce operations guidance skill with no executable code, persistence, hidden behavior, or destructive capabilities.
Install this if you want Chinese-language ecommerce operations guidance. Review the broad triggers and requested toolsets if you prefer skills to activate only on narrower, explicit ecommerce planning tasks.
The manifest and content are entirely in Chinese, and there is no indication that the skill supports other languages or lets the user choose a preferred locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern unless the locale restriction is explicitly justified.
The skill description is written to activate on a very broad set of ordinary ecommerce topics, which can cause the skill to be invoked in situations where the user did not explicitly request it. Over-broad activation increases the chance of unintended instruction injection from the skill into unrelated conversations and can steer model behavior too aggressively.
The trigger list contains many generic phrases like '电商运营', '团队管理', and '风险管控' that can appear in many benign conversations outside the intended scope. Ambiguous triggers make accidental activation more likely, which expands the attack surface by injecting this skill's instructions into unrelated tasks without clear user consent.
No suspicious patterns detected.
