Security audit
Security checks for vulnerabilities and agentic risk
This skill is a plain Markdown instruction set for generating designed HTML emails, with no executable code or hidden installation behavior.
Install this only if you want a Chinese-oriented HTML email design assistant. Review or replace any Google Fonts and Unsplash URLs before sending production emails, especially for privacy-sensitive campaigns.
The skill is written to operate in Chinese without offering user language choice, which can override user intent and cause inappropriate activation or output language mismatches. In an agent setting, forced language behavior can reduce transparency, impair user review, and increase the chance that generated content is misunderstood or misused.
The invocation condition is broad enough to match many generic requests involving email content, outlines, templates, or EDM creation. Overly broad activation can cause the skill to trigger unexpectedly, override more appropriate instructions, and steer outputs toward rigid HTML-generation behavior even when the user did not clearly request this specialized skill.
The manifest describes an email HTML designer that generates code and templates from provided content. Line L088 explicitly requires introducing fonts via Google Fonts CDN, adding an external-network dependency in the produced output that is not necessary to fulfill the core purpose of email template generation and is not declared in the manifest scope.
No suspicious patterns detected.
