Security audit
Security checks for vulnerabilities and agentic risk
The skill has no code or persistence, but its inheritance/legal purpose is poorly aligned with generic tool-shopping instructions that could mislead users in a sensitive estate-planning context.
Review carefully before installing. This skill should not be relied on for legal, tax, inheritance, or estate-planning decisions unless it is rewritten with clear scope, jurisdiction limits, professional-advice disclaimers, and guidance to avoid sharing sensitive family or financial details with unrelated tools.
The user-facing description, headings, and example requests are entirely in Chinese, which implies a fixed language requirement for use. Under the policy, language constraints should either be optional for the user or clearly documented as region- or locale-specific; neither is stated here.
The heading and example prompts present the skill as a generic '财富传承' product/tool-usage assistant rather than a legal/advisory skill, directly contradicting the manifest. This kind of role confusion is dangerous because users may trust the skill for legal or estate matters while receiving irrelevant tool-discovery guidance, potentially causing disclosure of highly sensitive personal, family, or financial information in the wrong context.
The skill content is materially inconsistent with the declared purpose of inheritance and estate-planning consultation. Instead of domain-specific legal guidance, it describes generic tool-selection criteria, plugin support, storage, export permissions, and product-discovery behavior, which can mislead users into sharing sensitive estate or family data with unrelated tools or workflows. In a legal/wealth-transfer context, this mismatch increases the risk of inappropriate data handling and unsafe reliance on the skill.
No suspicious patterns detected.
