Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language enterprise investment analysis template that uses public information and does not include hidden execution, persistence, credential access, or destructive behavior.
Install this if you want Chinese-language enterprise investment or due-diligence report drafting based on public information. Treat outputs as decision support only, verify cited facts independently, and do not rely on it as securities advice or a substitute for professional due diligence.
The trigger design is overly broad for a high-impact analytical skill, so common business phrases may invoke it unintentionally. Mis-triggering can cause the agent to collect external information, generate sensitive-looking due-diligence outputs, or bypass a more appropriate skill, which increases the risk of unintended data handling and misleading decision support.
Several listed triggers are generic business phrases and are not scoped tightly enough to this specific skill. This makes accidental activation likely in unrelated conversations, which can lead to irrelevant web searches, unintended report generation, and possible processing of company-related information without clear user intent.
正文以中文直接规定角色和输出任务，并在后续模板中固定为中文报告结构，没有看到允许用户选择语言或根据用户偏好切换语言的说明。这构成语言/区域策略上的自然语言约束，可能违反需要用户选择或显式 opt-in 的语言政策。
The trigger list is broad and overlaps with common business-analysis requests such as investment evaluation, due diligence, risk screening, and cooperation decisions. In agent-routing systems, overly generic triggers can cause this skill to activate outside its intended scope, leading to misrouting, inappropriate automation of high-stakes financial analysis, or unintended exposure of sensitive business context to the skill.
The natural-language fields exposed to users are entirely in Chinese, and the file does not state that the skill is China-region-specific or that language selection is optional. This can violate language or locale policy when a skill effectively forces one language without documented opt-in or justification.
