Security audit
Security checks for vulnerabilities and agentic risk
This skill is a narrow Chinese government-procurement review aid with disclosed knowledge-base use and no executable code, persistence, or hidden access behavior.
Installers should understand that this is a Chinese-language, China government-procurement legal/compliance aid. It should be treated as decision support only: verify cited laws and knowledge-base results, and do not use it as a substitute for formal legal or procurement authority review.
The README is entirely written as a Chinese-only skill description and presents outputs, examples, and operating assumptions solely in Chinese. There is no indication that users may choose another language or that the language restriction is an explicit, justified policy requirement, which can violate language/locale choice expectations.
The instruction says outputs must uniformly use specific Chinese terms and must not use alternative terminology. This imposes a language/locale constraint in the skill's natural-language behavior without indicating user choice or opt-in, which matches the policy-violation category for forced language or locale.
The display name and full description are written only in Chinese, and the manifest does not indicate that the skill is China-region-specific or that users may opt into another language. This can violate language/locale policy when a skill effectively requires one language without explicit user choice or documented justification.
SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all instructions and operational guidance only in Chinese, with no statement that the skill is China-specific or that users can opt into the language, which can amount to forcing a language/locale without user choice.
This markdown file contains user-facing instructional content only in Chinese, which can amount to a language/locale policy violation when the skill does not provide opt-in or alternative language support. The file does not state that it is intentionally limited to a Chinese-speaking or region-specific audience, so the language constraint is not explicitly justified.
No suspicious patterns detected.
