Security audit
Security checks for vulnerabilities and agentic risk
This is a lightweight advisory skill that changes response framing and language defaults but does not add code execution, data access, persistence, or hidden authority.
Install this if you want a Chinese-first advisory perspective for product and organization questions. Users who prefer another language should state that preference in their request, since the skill otherwise defaults to Chinese.
The file states "输出语言：中文" under the default contract, which imposes a language preference by default. The policy for this audit flags language or locale constraints unless the skill explicitly offers a user choice or clearly justifies the constraint as region-specific.
This markdown file contains stylistic instructions entirely in Chinese and directs the expression style the skill should use, but it does not indicate that the user can choose another language or that the Chinese-only constraint is intentional for a region-specific use case. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The manifest presents the skill name and description in Chinese while the default prompt hard-codes English instructions. This can create an implicit language policy or user-experience constraint without explicit user opt-in or documented locale justification.
The markdown content is entirely written in Chinese and does not indicate that the user can choose another language or that the file is intentionally limited to a Chinese-speaking audience. This can violate language/locale policy when a skill implicitly forces a specific language without opt-in.
This markdown file contains substantial Chinese text alongside English headings, which can impose a language/locale assumption on users who may not read both languages. The policy allows locale constraints when documented or user-selected, but no such opt-in or justification is provided here.
This markdown file includes substantive instructional content in Chinese alongside English, but it does not state that the skill is bilingual, region-specific, or user-selectable by language. Under the policy for natural-language violations, forcing or assuming a specific language without opt-in can be a locale-policy issue.
No suspicious patterns detected.
