Security audit
Security checks for vulnerabilities and agentic risk
This is a read-only guidance skill for product and strategy advice through a Steve Jobs lens, with the main caveat that it defaults to Chinese output.
Install this if you want a Chinese-first advisory lens for product, design, and strategy decisions. Ask explicitly for another language if needed, and treat the output as a perspective with stated tradeoffs rather than as factual Steve Jobs authority or a substitute for current fact-checking.
The markdown instructs the skill to '默认用中文输出' and later sets '输出语言：中文' as the default contract unless the user specifies otherwise. This imposes a language preference by default rather than offering a neutral language choice or requiring explicit opt-in, which matches the locale/language policy violation criteria.
The manifest presents the skill name and description in Chinese, while the operational instruction in the default prompt is fixed in English. This creates a language-policy concern because the skill implicitly imposes a language choice without documenting user opt-in or offering locale selection.
This markdown file presents all substantive user-facing content in Chinese, with no indication that users can opt into another language or that the skill is intentionally limited to a Chinese-speaking context. Under the language/locale policy rule, forcing a specific language without user choice is a natural-language policy violation.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
5. **Invisible parts still matter**
- 用户看不见的部分也会影响长期品质。
6. **Don't ask users to invent the future**
- 用户反馈重要，但不是创新方向本身。
7. **Elevate the debate**
The document’s guidance is written entirely in Chinese and appears to prescribe a specific language/style for the skill’s output, but it does not mention that this language choice is optional or user-selected. This can violate language/locale policy when a skill implicitly forces a language without user opt-in.
This manifest describes the skill's display name and default prompt, but it does not define when the skill should activate or any limits on invocation context. Without specific trigger scope or exclusion conditions, the skill may be invoked more broadly than intended.
SQP-3 applies to all file types and covers language or locale policy violations. This markdown content presents substantive guidance in Chinese while the file also uses English section titles, and there is no statement that the content is intentionally Chinese-only or that users can choose another language.
This markdown file contains substantive instructional content in Chinese under English section headings, which can impose a language requirement on users who do not read Chinese. The policy calls for flagging language or locale constraints when the skill does not provide user choice or a justified regional scope.
No suspicious patterns detected.