Security audit
Security checks for vulnerabilities and agentic risk
This skill is a Chinese-language architecture-diagram helper with no executable code, hidden data access, or persistence found.
Install this if you want a Chinese-oriented 4A architecture drafting workflow that produces draw.io XML diagrams. Specify your preferred language or architecture-definition variants up front if you do not want the default Chinese 4A framing, and review any externally sourced claims before relying on them for compliance or design decisions.
Line L019 states '默认产出中文', which sets a default language preference without first asking the user or clearly offering an opt-in choice. This can violate language/locale policy expectations when users have not requested Chinese output.
The document states that the skill '默认采用中文企业架构实践中常见的 4A 口径', which imposes a language/locale-specific default in natural language. While it allows user-defined 4A definitions later, it does not offer a language or locale choice up front or frame the Chinese default as opt-in.
Line L003 instructs the user to output in a specific language context using Chinese-only wording and format expectations, but the template does not provide any opt-in, alternative locale, or justification that this skill is region-specific. This creates a natural-language policy concern because it effectively imposes a locale/language choice on all users.
The skill instructions are written as prescriptive requirements in Chinese, including fixed Chinese diagram names and labels, which effectively enforce a specific language/locale. There is no indication that users may choose another language or that the constraint is justified as region-specific.
The default prompt includes both English and Chinese instructions, which implicitly steers interaction language/locale without any user opt-in or explanation. Under the policy rules, language or locale constraints should either be optional for the user or clearly justified.
The entire reference is written only in Chinese, including headings and instructions, without indicating that language choice is optional or context-specific. Under the policy, a skill should not implicitly force a specific language or locale unless it is justified or presented as an opt-in choice.
This markdown file contains user-facing guidance exclusively in Chinese, including headings, instructions, and requirements. Under the language/locale policy rule, forcing a specific language without user opt-in can be a policy violation when no alternative language option or justification is provided.
