Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Chinese short-video script-writing workflow with no executable code, persistence, credential access, or hidden high-impact behavior.
Install this if you want a Chinese-focused short-video scripting assistant. Expect outputs and templates to default to Chinese unless you ask for another language; no local system access or automatic actions are indicated by the artifacts.
The markdown explicitly states '输出语言：中文' as a default contract, which imposes a language choice on the user without offering an opt-in or alternative. The policy allows locale or language constraints only when users are given a choice or when the restriction is clearly justified as region-specific.
The short description and default prompt specify that the workflow produces Chinese short-video scripts, which imposes a language preference in the skill's natural-language configuration. Because no user choice, opt-in, or justification for the locale restriction is provided in this file, this appears to conflict with the language/locale policy guidance.
This manifest file includes a natural-language default prompt that broadly instructs use of the skill to create a Chinese short-video script pack, but it does not define specific trigger phrases, scope boundaries, or negative examples. In a manifest context, that ambiguity can contribute to unintended invocation because the activation conditions are not clearly constrained.
This markdown file presents all operational guidance in Chinese, which can amount to a language/locale policy violation when the skill does not provide user opt-in or explain that it is intentionally region-specific. The file contains no indication that Chinese is optional, selectable, or required for a documented compliance reason.
This markdown template uses Chinese section headings and field labels throughout, which effectively forces a specific language for users of the skill. The file does not indicate that Chinese is optional, user-selected, or required for a justified region-specific purpose.
SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all substantive guidance in Chinese, with no indication that the skill is region-specific or that users can opt into another language, which can conflict with a policy requiring language choice or justification.
This markdown file contains natural-language guidance primarily in Chinese, but line L7 introduces English phrasing ('promise') with no indication of intended language policy or user language preference. Under the language/locale policy rule, forcing or inconsistently imposing a language without opt-in can be a policy concern.
This markdown file contains all operational guidance in Chinese, and there is no surrounding note that the skill is Chinese-only or that users can select their preferred language. Under the policy rule for natural-language constraints, forcing a specific language without opt-in can be a locale-policy issue.
No suspicious patterns detected.
