Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward R&D document-management helper that stores document indexes locally and suggests generic web searches, with no evidence of hidden execution or data theft.
Install only if you want a Chinese-language R&D document workflow. Be aware it keeps a local document index under data/docs and may prompt generic web searches for documentation standards; avoid putting confidential project details into web-search queries unless you intend to send them externally.
The skill declares capabilities that imply local file reads and writes through its documented storage behavior and referenced scripts, but it does not define any explicit tool scope or permission boundaries. This can cause the agent to access or modify files more broadly than users expect, especially in a workspace containing unrelated sensitive documents.
The trigger conditions are broad enough to match routine document-writing and organization tasks, which increases the chance of automatic or inappropriate activation. In practice, that can cause unintended web searches or persistent storage actions during ordinary work, expanding data exposure beyond the user's intent.
The skill instructs the agent to perform external web searches and to persist documents locally, but it does not disclose either outbound data flow risks or retention behavior. This is dangerous because users may provide proprietary R&D material without realizing that queries could reveal sensitive context externally and that generated or indexed artifacts will remain on disk.
The file-level description and all user-facing strings are written exclusively in Chinese, and the CLI does not provide any option for users to select another language. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly justified.
The manifest scopes this skill to document classification, version management, and template generation for organizing R&D documents. The function at L019-L030 adds an external information-retrieval behavior by preparing web searches for document standards, which goes beyond managing local documents and their metadata.
The manifest description and operational instructions are entirely in Chinese, which implies a fixed language/locale for use. There is no statement that the skill supports user language preference or that it is intentionally restricted to a Chinese-speaking or region-specific environment.
This markdown file uses Chinese exclusively for the title, headings, and table content, which can amount to forcing a specific language without user opt-in. The file does not indicate that the template set is intended only for a Chinese-speaking or region-specific audience, nor does it offer alternatives.
This markdown file is natural-language content, so language-policy checks apply. The template forces a single language/locale for all users, and there is no indication that the skill is intentionally limited to Chinese-speaking or region-specific use.
This markdown template presents all user-facing content in Chinese and does not offer any language choice, opt-in, or explanation that it is intended only for a Chinese-speaking or region-specific context. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.
The document title and the entire content are written exclusively in Chinese, with no indication that language selection is optional or that the scope is explicitly limited to a Chinese-speaking or region-specific context. Under the policy rule for language/locale constraints, this can be considered a natural-language policy issue because it effectively fixes the skill content to a single language without opt-in.
The command-line interface defaults to search, which in this script means generating web-search queries for external standards rather than searching managed documents. That behavior does not align with the manifest's stated core functions of classification, version management, and template generation.
No suspicious patterns detected.
