Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent Chinese-language business analysis skill that uses public information to produce enterprise customer-profile reports, with no artifact-backed evidence of hidden execution, persistence, or data exfiltration.
Install this if you want Chinese enterprise customer-profile reports based on public sources. Review ambiguous activations carefully, especially for generic due-diligence or investment prompts, and treat generated business or investment conclusions as decision support rather than authoritative advice.
The trigger design is overly broad for a high-capability enterprise analysis skill, so ordinary business-analysis requests may invoke it unintentionally. This increases the chance of unnecessary tool use, over-collection of public data, and execution of a heavyweight workflow in contexts where the user did not clearly request this specific analysis.
Several trigger phrases are generic business-analysis terms such as due diligence, market expansion, or investment evaluation, which overlap with many unrelated user intents. In this skill, that broad scope is more dangerous because the instructions push a comprehensive, tool-enabled report that could be launched when a narrower or different analysis was intended.
The manifest description and all triggers are Chinese-only, with no documented language-selection behavior or user choice. This can lead to mismatched activation, user confusion, and unintended operation for multilingual users, which is a safety and reliability issue though not typically a direct security compromise.
The trigger list is very broad and contains overlapping business-analysis intents without activation boundaries, disambiguation rules, or exclusion cases. This can cause the skill to activate in loosely related contexts and steer users into unsolicited due-diligence or profiling workflows, increasing the chance of inappropriate data handling or overbroad analysis.
No suspicious patterns detected.
