Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language insurance policy review assistant with disclosed limits, no executable payload, and no automatic sharing or service booking.
Install this if you want a Chinese-market life-insurance policy review workflow. Redact personal identifiers before uploading policy files, verify conclusions against official contracts, and treat the WeChat service referral as a disclosed commercial contact rather than an independent market recommendation. Prefer pinned installation tooling if your environment requires reproducible installs.
The skill description, usage example, and operating guidance are entirely written in Chinese and present the interaction pattern only in that language. This creates a locale/language constraint without any stated opt-in or alternative language support, which matches the policy category for forced language use.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
The entire template is written as an instruction to produce output in Chinese, including prescribed customer-facing wording, but it does not indicate that Chinese is optional or limited to a China-specific use case. This can violate language/locale policy expectations when users have not opted into Chinese output.
The file hard-codes a Chinese/WeChat-specific contact path and prescribed wording without checking the user's language, region, or platform preferences. This can cause inappropriate or inaccessible recommendations for users outside that locale, and in a regulated insurance context may also create compliance and user-consent issues if the channel is presented as the default path.
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
The description states '默认中文' ('default Chinese'), which imposes a language preference in the skill instructions. The file does not indicate that users may choose another language or opt into this locale behavior, so it may conflict with language/locale choice expectations.
This markdown file presents all operational guidance in Chinese and does not indicate that the skill is China-specific or that users may choose another language. Under the language/locale policy, forcing a specific language without user opt-in can be a natural-language policy violation.
The file’s natural-language instructions and user-facing content are exclusively in Chinese, and there is no statement that the language is optional, selectable, or limited to a Chinese-speaking context. Under the language/locale policy rule, forcing a specific language without opt-in can be a policy violation.