Security audit
Security checks for vulnerabilities and agentic risk
This is a local Chinese-language teacher communication assistant that stores teacher and student communication notes only with user confirmation and does not show hidden upload, remote execution, or deceptive behavior.
Install this only if you want a Chinese-language assistant that keeps local teacher and student communication archives. Because it may store sensitive student-related summaries, choose an appropriate local archive location, review previews carefully, and avoid entering unnecessary identifiers such as addresses, phone numbers, or ID numbers.
The skill instructs the agent to read and write teacher and student profile files and to execute a local management script, but it does not declare any explicit tool scope or allowed-tools boundary. That mismatch increases the risk of overbroad file access or unintended writes, especially because the skill handles sensitive education records and temporary payload files.
文件标题、名称和操作说明均默认并强制在中文语境下执行，但未说明这是仅面向中文教师用户的区域化技能，也未给出语言选择或用户确认。这可能构成语言/区域策略上的自然语言约束问题。
L003 的描述使用了“需要准备家长沟通”“处理家长质疑”“准备电话面谈”等宽泛条件，覆盖面很大，但没有明确边界、排除条件或更具体的触发短语。这类表述容易匹配大量普通教学沟通场景，增加非预期调用的风险。
This markdown guidance forces a specific language/locale in the skill content and does not indicate that users may opt into another language. Under the policy, language constraints should either be optional or clearly justified as region-specific.
This file contains natural-language instructions exclusively in Chinese, including normative requirements for how profile fields and records should be structured. There is no indication that users may choose another language or that the Chinese-only constraint is an explicitly justified regional requirement, which matches the language/locale policy concern.
The file’s instructional content is entirely in Chinese and does not indicate that language selection is optional or that the skill is intentionally limited to a Chinese-speaking context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
This code file contains natural-language strings that define the tool’s behavior and user interface in a single language only. Under the policy, forcing a specific language without offering a language or locale choice is a natural-language policy violation.