Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent file-processing utility, but it advertises one-click bulk file changes without explaining safeguards against accidental data loss.
Review this carefully before installing if you would use it on important files. Prefer using it only on copied test folders until it documents preview, backup, overwrite, conflict, and explicit confirmation behavior for bulk operations.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
# 批量文件处理工具箱
## 功能
文件整理、格式转换、批量重命名、压缩解压一键搞定。
The skill advertises one-click batch operations that can rename, reorganize, compress, decompress, and otherwise alter large numbers of user files, but it provides no warning about file modification risk, overwrite behavior, scope of changes, or the need to verify targets before execution. In a batch-file context, omission of these safeguards increases the chance of accidental destructive changes or data loss, especially because the UX emphasizes simplicity ('一键执行').
The display name and description are written entirely in Chinese, and the manifest does not indicate that the skill is region-specific or that users can choose another language. This can violate language/locale policy when users are not given an explicit opt-in or justified locale limitation.