Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Chinese writing-style helper with no executable code, persistence, credential handling, or hidden data access.
Install this if you want Codex to produce or review Chinese prose in Cell's specific voice. Users who want another language or a less personalized voice should explicitly override the language/style in their request.
The default contract says to 'Assume all of the following unless the user says otherwise' and includes 'write in Chinese.' This imposes a language choice by default rather than offering a language or locale option, which matches the policy's language/locale violation criterion.
The skill’s default prompt explicitly instructs the agent to produce Chinese output, but there is no indication that this language preference is conditioned on the user’s request or consent. This can override user expectations, degrade usability, and in multilingual contexts cause unintended disclosure or miscommunication, though it is not directly a code-execution or privilege-escalation issue.
The template headings and instructions are entirely in Chinese, which imposes a specific language on users without offering a language choice or opt-in. Under the policy, a skill should not force a specific language unless the locale constraint is explicitly documented and justified.
The checklist explicitly requires output to be in Chinese and to match a specific Chinese stylistic voice ("像 Cell"). This is a natural-language locale policy constraint with no indication that users can choose another language or that the restriction is justified by a region-specific purpose.
The skill content establishes a Chinese identity and phrase system as defaults, including Chinese labels and Chinese default catchphrases/emotional markers. This can force a specific language/locale in generated content without explicit user opt-in, which matches the policy's language/locale violation criteria.
This markdown file includes a natural-language instruction that constrains output to a particular language/locale/style preference: 'it sounds like Cell, not generic casual Chinese.' The policy allows locale constraints only when users are given a choice or when the constraint is clearly documented and justified; neither is present here.
Line L026 instructs writers to use the Chinese phrase “我的选择是” instead of “你应该,” which imposes a specific language/locale convention. Because the document does not offer an opt-in choice or explain that the skill is intentionally limited to Chinese-language output, this is a natural-language policy concern.
This markdown file contains user-facing natural-language fields exclusively in Chinese, and there is no indication that the skill is region-specific or that users may opt into another language. Under the policy rule for language or locale constraints, forcing a specific language without opt-in can be a policy violation.
Lines L119-L121 provide example phrasing only in Chinese inside an otherwise English-language guidance document. This can impose a specific language/locale style without user opt-in, which matches the policy concern for language or locale constraints.
No suspicious patterns detected.
