Security audit
Security checks for vulnerabilities and agentic risk
This is a local installment-rate worksheet checker with no evidence of network use, persistence, credential access, or hidden side effects.
Install only if you want a Chinese-language local checker for copied installment-rate tables. It uses Bash to run a bundled Node script, so review the exact command path and provide only the worksheet input you intend it to read.
整体上，代码与描述高度相关，核心能力——分期方案逐行复算、合计勾稽、重复与空缺检测、IRR/实际年化核对——基本一致，也没有发现越权资源访问或无关主功能。但描述使用了较笼统的“核对表逐项核对”，容易让人理解为更通用的逐项审表能力；实际上代码严格依赖固定表头/字段，且仅适用于等额本息分期费率核对。此外，描述中“每条结论引用原文行号”表述较绝对，而代码在 insufficient_input 等分支不会生成逐条带行号结论。因此存在轻度到中度的描述-行为不完全一致。不是恶性偏差，但按题目标准仍应判为 mismatch。
Referenced artifact was not completely inspected
node scripts/run.mjs --sample # 先看样例
Referenced artifact was not completely inspected
node scripts/run.mjs --sample # 先看样例
The skill presents itself as a narrowly scoped, deterministic, local worksheet checker, yet it declares Bash execution capability unrelated to that stated purpose. Unnecessary shell access expands the attack surface: if downstream prompts, wrappers, or future content invoke Bash on untrusted inputs, the skill could execute arbitrary local commands contrary to user expectations.
Granting Bash to a skill whose described function is simple installment-rate checking is a capability mismatch that can mislead users about the skill's real power. Even without network access, shell execution can read local files, inspect the environment, or modify workspace data, making the skill materially more dangerous than its benign financial-checking description suggests.
The documentation claims the free and full versions differ only by a short list of omitted checks, but the manifest still exposes broad Bash capability. This discrepancy can create a false sense of narrow scope and safety, increasing the risk that users or calling systems will trust the skill with sensitive local data while underestimating its ability to execute arbitrary shell operations.
User-facing natural-language strings throughout the file, including the title, usage text, errors, and output messages, are all in Chinese. This effectively forces a specific language for all users, and the file does not offer opt-in language selection or explain that the skill is intentionally limited to a Chinese-speaking or region-specific audience.
The comment says non-JSON input is treated as plain text material such as a 'directly pasted full contract', which suggests broader document handling. But the surrounding manifest and usage text repeatedly state the tool is for checking installment tables with headers and should refuse insufficient materials rather than broaden scope. This is a documentation-level contradiction about intended accepted input.
The JSON contains only Chinese-language user-facing text and does not indicate any user opt-in, language selection, or region-specific justification. Under the policy, fixed language/locale behavior without choice can be a natural-language policy violation.