Security audit
Security checks for vulnerabilities and agentic risk
This is a localized sales-analysis skill that reads its bundled CSV and creates local chart or PDF outputs, with no evidence of hidden access, network use, persistence, or credential handling.
Install this only if you want a Chinese-language sales-analysis helper for the included CSV-style workflow. Expect it to create PNG charts in /tmp and PDF reports in its reports folder; review generated reports before sharing them.
The trigger conditions are broad enough to activate on generic requests about data, charts, or reports, which can cause the agent to invoke this skill in contexts the user did not intend. Overbroad routing can expose internal data-analysis capabilities unnecessarily, produce misleading outputs, or cause unintended file generation/export actions.
This code file contains natural-language strings and documentation that force Chinese-language interaction, including the module docstring and later user-facing messages. The policy requires flagging language or locale constraints when the skill does not provide opt-in or a documented justification for restricting output to a specific language.
The manifest description and operational instructions are entirely in Chinese, which effectively forces a specific language for understanding and use. There is no indication that the skill supports language selection or that the Chinese-only scope is intentionally limited to a region-specific use case.
No suspicious patterns detected.
