Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent jewelry advertising compliance reviewer, but it automatically saves review reports and can persist user-provided complaint terms into its own word library.
Install only if you want a China-focused jewelry marketing compliance reviewer. Treat saved reports as retained workspace files, and do not let ordinary users merge complaint terms into the word library unless you have a review process for persistent changes.
The listed trigger phrases include “审一下这段文案”, which is a common conversational request and not specific enough on its own to reliably limit invocation to this jewelry-ad-compliance skill. Because the description does not provide exclusion conditions or negative examples, this broad phrasing could cause unintended activation in ordinary review contexts.
The entire skill description and required output format are written only in Chinese and implicitly assume Chinese-language use, but there is no statement that the user can choose another language or that the locale restriction is intentional and justified. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
The skill explicitly instructs writing full compliance reports to workspace files and creating directories, which exceeds a narrowly scoped review-only function and introduces unnecessary persistence of potentially sensitive user-provided marketing copy. If used on confidential drafts, campaign plans, or customer data embedded in ad copy, this can create unintended data retention and exposure within the workspace.
The skill allows user-provided 'historical complaint' terms to be merged into the reference word library, turning a stateless review tool into one that modifies its own knowledge base. This creates a prompt-driven integrity risk: untrusted input can poison future reviews, degrade accuracy, and cause persistent behavior changes beyond the current task.
The title and introductory text state the library is based on PRC advertising law and are written entirely in Chinese, implicitly constraining the skill's operation to a specific language/locale. There is no indication that users can opt into this locale or that the limitation is surfaced as a documented regional scope within this file.
No suspicious patterns detected.
