Security audit
Security checks for vulnerabilities and agentic risk
This skill appears to be a local Chinese divination tool with no hidden network or privilege behavior, though its optional saved history should be documented more clearly.
Use this skill as a local Chinese-language divination CLI. Be aware that using --save writes reading records and an index locally, and avoid saving sensitive health, relationship, finance, or dispute details unless you are comfortable retaining that history.
The declared purpose is divination and analysis, but the implementation reportedly also stores local records, maintains an index, and searches historical entries. This mismatch is security-relevant because hidden persistence and retrieval can collect sensitive user inputs over time, surprise operators, and expand the attack surface beyond what the skill advertises.
The skill exposes code-capable behavior involving file reads and writes, but the manifest declares no explicit tool scope or permissions. This creates an authorization gap: consumers may trust the documented surface area while the implementation can access or persist local data without clear consent boundaries.
The file’s user-facing description and instructions are entirely in Chinese, and there is no note that the skill is Chinese-only, region-specific, or that users may choose another language. This can violate a language/locale policy when a skill implicitly forces one language without user opt-in.
The skill writes divination results, timestamps, question categories, and an index of prior readings to local disk without making this persistence prominent in the advertised functionality. Divination questions can reveal sensitive personal topics such as health, marriage, finances, or disputes, so silent retention creates a privacy risk if other local users, tools, or later skill actions access the stored files.
The code persists divination records locally with no user-facing warning that potentially sensitive query history is being stored. Because the skill supports intimate question categories and saves indexed metadata, this can unintentionally create a personal history dataset that may be read by others on the same system or mishandled later.
User-facing descriptions, CLI help text, output labels, and status messages are all fixed in Chinese throughout the file. This enforces a specific language experience without any opt-in, fallback, or documented locale limitation, which matches the language/locale policy concern.
The skill includes history browsing and search features over previously saved divination records, but those capabilities are not reflected in the manifest description. This increases privacy risk because users may not expect retained records to be discoverable later, especially for sensitive subjects like health, relationships, or finances.
No suspicious patterns detected.
