Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Chinese-language PRC state-owned-enterprise procurement compliance skill with no executable code, persistence, credential use, or hidden data handling found.
Install this only for PRC state-owned-enterprise procurement and tendering questions. Treat outputs as compliance guidance rather than formal legal advice, verify current law and local rules, and be aware that the skill is written for Chinese-language use and depends on disclosed external ima knowledge bases for richer sourcing.
The manifest description and core overview present the skill entirely in Chinese and position it as serving users nationwide, but nowhere offers a language choice or states that responses can adapt to user preference. Under the policy rule, forcing a specific language/locale without opt-in is a natural-language policy violation.
The manifest description states the skill is based on the legal framework of the People's Republic of China and state-owned enterprise procurement rules. For a general-purpose skill manifest, this imposes a jurisdiction-specific policy context without explicitly limiting the skill to that region or giving users a choice, which can create a locale/policy mismatch.
Lines L33-L35 require the assistant to use a fixed Chinese disclaimer whenever the connector is unavailable. This is a natural-language locale constraint presented as mandatory behavior, and the file does not offer the user any language choice or explain that the skill is intentionally limited to Chinese-only operation.
The fallback templates in L52-L56 are written as required quoted responses and do not provide an option to adapt to the user's preferred language. This forces a specific locale in natural-language behavior, which violates the stated policy unless choice or justification is provided.
The title and procedural instruction are entirely in Chinese and direct the responder to follow this framework upon receiving a question, which effectively imposes a specific language/locale on outputs. The file does not indicate that Chinese is optional, user-selected, or limited to a clearly documented region-specific deployment.
This markdown file instructs that when a user uses an incorrect term, the assistant 'must first correct and then answer,' and the entire guidance is framed exclusively in Chinese terminology conventions. Because the file does not offer a language or locale choice or state that this behavior applies only when the user wants Chinese procurement-law terminology, it imposes a specific language/locale behavior without opt-in.
The README presents the skill entirely in Chinese and does not indicate that users may choose another language or locale. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.
The entire skill file is written in Chinese and does not indicate that language selection is optional or that the skill is explicitly limited to Chinese-speaking users. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be a locale-policy issue.
No suspicious patterns detected.
