Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple review checklist for auditing other skills and does not include code, network calls, persistence, or hidden data access.
Installers should understand that the skill is primarily written in Chinese and intended for auditing skill text supplied by the user. Use it with explicit file inputs and review its findings as advisory rather than automatic security decisions.
This markdown file contains user-facing natural-language guidance entirely in Chinese, which effectively forces a specific language for use of the skill. The policy allows locale constraints only when the skill offers user choice or clearly documents a justified region/language limitation, which is not present here.
The manifest description says the skill audits installed skills for several broad categories, including "overscoped triggers," but provides no specific invocation phrases, scope boundaries, or exclusion conditions. In a manifest file, this lack of specificity can make it unclear when the skill should activate versus when general discussion of security or audits should not trigger it.
The manifest description is written entirely in Chinese, which can imply a language-specific experience without any stated opt-in, alternative locale support, or region-specific justification. This may conflict with language/locale policy expectations when the skill is otherwise not documented as China-specific.
No suspicious patterns detected.
