Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Chinese procurement checklist comparison assistant with no code execution, persistence, or hidden data movement.
Install this only if you intend to use a Chinese-language procurement checklist comparison workflow and are comfortable providing the relevant tender and bid-response lists to the agent and its declared knowledge-base connector. Do not treat its red/yellow/blue flags as final legal or bid-disqualification decisions; the skill itself correctly leaves those decisions to the responsible review body.
The README presents all user-facing instructions and behavior descriptions exclusively in Chinese. This can amount to a language policy violation because the skill effectively forces a specific language without indicating that users may choose another language or that the restriction is required by context.
The skill instructions, interaction templates, and output format all assume Chinese-language operation, but the file does not state that Chinese is optional or that the skill is restricted to a Chinese-language procurement context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The skill metadata and description are entirely in Chinese, including the user-facing display name and description, with no indication that language selection is optional or that the skill is intended only for a Chinese-speaking or China-specific deployment context. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.
No suspicious patterns detected.
