Security audit
Security checks for vulnerabilities and agentic risk
This skill is a repo-local planning-document workflow with visible Chinese-language constraints and no evidence of hidden execution, exfiltration, or persistence outside project documents.
Install this if you want a Chinese-language SDD documentation workflow that reads project context and writes .specify planning files. Review the generated documents before continuing between phases, especially because the skill intentionally minimizes questions and infers missing details where possible.
Line L103 states "全程使用中文编写", which enforces a specific language for the skill's behavior. This is a natural-language policy concern because it removes user language choice and does not document any justified region-specific constraint or opt-in.
The entire checklist and operational guidance are written in Chinese, with no indication that users may choose another language or that the skill is intentionally restricted to a Chinese-speaking or region-specific context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The entire template is written in Chinese and presents all required headings and instructions only in that language. For a general-purpose constitution template, this imposes a specific language/locale without any user opt-in or documented region-specific justification, which matches the policy-violation criteria.
The template content is entirely written in Chinese and includes an instruction line in Chinese, which effectively constrains the skill output format to a specific language. Under the policy, language constraints should either offer user choice or be clearly justified as region-specific; neither is present here.
This markdown template is written entirely in Chinese and uses Chinese placeholders and instructions, which imposes a specific language on users without any opt-in or alternative language option. The policy explicitly flags language or locale constraints unless the skill offers a choice or documents a justified region-specific scope.
No suspicious patterns detected.
