Security audit
Security checks for vulnerabilities and agentic risk
This is a documentation-only skill for writing agent-facing documents, with no code execution, credential access, persistence, or hidden high-impact behavior found.
Review the Chinese licensing and README text if you rely on those terms, and note that the README mentions references/scripts folders that are not present in this package. From a security perspective, the skill is proportionate for documentation guidance.
The title and content are entirely in Chinese, which imposes a language choice on users and agents without indicating that other languages are supported or that Chinese is optional. Under the policy, a language-specific constraint should either be optional or clearly justified as region-specific.
This markdown file uses Chinese exclusively ('更新日志', version notes) and does not mention that the skill is intended for a Chinese-speaking audience or provide any language choice. Per the policy, forcing a specific language without user opt-in can be a natural-language policy violation.
This file contains user-facing natural language that effectively forces a specific language/locale for understanding the skill's licensing terms. The policy allows locale constraints only when users are given a choice or when the constraint is clearly documented and justified, which is not present here.
该 NOTICE 文件在自然语言中明确写明“全部改写为中文”。按规则，强制特定语言而未体现用户可选择语言或明确的合理地域性约束，属于可报告的语言/locale 政策问题。
No suspicious patterns detected.
