Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed image-generation skill for making minimal zine-style posters, with no evidence of hidden code, persistence, credential access, or destructive behavior.
Install this if you want an agent to create minimal zine-style poster images and you are comfortable with it calling ImageGen after notifying you about credit use. Review the broad triggers if you prefer tighter control over when image generation starts, especially for generic poster or editorial-design prompts.
The skill description is overly broad and can activate on generic creative requests like themes, moods, article ideas, photos, or content briefs, which are common across many unrelated skills. This increases the risk of incorrect routing, causing the agent to invoke image generation unexpectedly, consume credits, and override more appropriate specialized skills.
The required output format hard-codes Chinese section headers ('生成图', '最终 Prompt', '说明') without checking the user's language or offering a locale choice. This can degrade usability, create confusion, and cause policy or product inconsistencies in multilingual environments, though it is not a direct security compromise.
The trigger list contains broad, generic creative phrases such as 'minimal poster' and 'editorial poster' that could match many ordinary requests unrelated to this specific skill. In an agent environment, overly broad activation can cause unintended routing, surprise tool use, or the skill taking over requests better handled by other skills, which increases the chance of inappropriate outputs or unnecessary image generation.
The description hard-codes a Japanese/Korean aesthetic as the default output style without indicating that this is optional or user-selected. While not a classic security flaw, this can lead to misaligned outputs, cultural imposition, or unexpected behavior when the user did not request that locale-specific style, especially in automated skill selection contexts.
The instructions prescribe an emotional and stylistic output including a 'Japanese/Korean indie zine' mood as part of the default rendering rules. This is a natural-language policy concern because it forces a specific locale/cultural framing rather than offering it as an optional choice based on user preference.
The example wording includes 'Japanese indie zine aesthetic' as part of the standard prompt shape, reinforcing a specific locale-associated style without indicating user choice or a documented justification. This can violate language/locale policy expectations when applied universally.
