Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward Chinese vocabulary-learning skill with local progress storage and no evidence of hidden, destructive, or exfiltrating behavior.
Install only if you are comfortable with a Chinese-language vocabulary helper storing local study progress and preferences. The documented network dictionary lookup and daily reminder features are not implemented in the inspected code, so review future updates if those capabilities are added.
The README presents all usage instructions, examples, and descriptions in Chinese, which effectively forces a specific language for users. Under the policy, language constraints should either provide user choice or be explicitly documented and justified as region-specific.
The skill states it needs file read/write access and even documents a concrete storage path, but it does not declare an explicit tool scope or permission model in metadata. That mismatch can lead to overbroad or implicit filesystem access, making it harder to enforce least privilege and easier for an agent runtime to grant more access than users expect.
The trigger keywords are very broad and overlap with common language-learning requests such as querying word meanings or asking for vocabulary help. This can cause unintended invocation, which is a security and safety concern when a skill has file access and scheduled behavior, because users may activate it without realizing the side effects.
The skill advertises scheduled daily pushes and reminders without clearly warning about proactive notifications or recurring background behavior. Users may unknowingly enable persistent reminders, which can create privacy, consent, and nuisance risks, especially if combined with saved learning history and configurable schedules.
The module description and all user-facing responses are written in Chinese, and the trigger handling expects Chinese query terms such as “开始”, “学习”, and “测试”. This imposes a specific language/locale on users without offering an explicit language choice or documenting a justified locale restriction.
This code updates and saves user learning preferences and progress to progress.json via save_json, but there is no confirmation prompt, user-facing disclosure, or nearby comment explaining that the skill persists data locally. Because this is a code file, file writes that store user data should include some visible warning unless the persistence behavior is clearly disclosed.
