Security audit
Security checks for vulnerabilities and agentic risk
This is a low-risk writing assistant skill for improving Chinese short-form openings, with no executable code or hidden high-impact behavior found.
Install this if you want Chinese-language short-form opening optimization. Users who need another language should explicitly ask the agent to respond in that language, because the bundled default template is Chinese-focused.
The file states under the default contract to 'Assume the following unless the user says otherwise' and includes 'write in Chinese.' This imposes a language choice by default rather than offering a user opt-in or explicit selection, which matches the language/locale policy violation criteria.
The natural-language instruction begins with "Use $hook-optimizer..." in English even though the skill name and description indicate a Chinese-focused skill. This creates a language-policy concern because the file implicitly fixes the interaction language without offering the user a choice or documenting the constraint.
This markdown template is written entirely in Chinese, including the title and section prompts, which implicitly constrains the skill output or usage to a specific language. The file does not offer a language/locale choice or explain why a Chinese-only template is required, which matches the language/locale policy violation criteria.
The document is entirely written in Chinese and provides no indication that language choice is optional or that the skill is intentionally limited to Chinese-speaking users. Under the policy rules, forcing a specific language without user opt-in can be a natural-language policy violation.
