Security audit
Security checks for vulnerabilities and agentic risk
This is a simple planning workflow skill that writes local Markdown plan/progress files and does not contain executable code or hidden high-impact behavior.
Install this if you are comfortable with a Chinese-language planning workflow that creates and updates three Markdown tracking files in your current project directory. Review the generated plan before saying to execute it.
Line L08 presents the core skill behavior entirely in Chinese, which indicates a language-specific instruction in the skill documentation. There is no opt-in, alternative language option, or documented region-specific justification, so this creates a natural-language locale policy concern.
The markdown template uses Chinese section headers exclusively (e.g. '关键发现', '决策记录', '验证命令/步骤', '回滚步骤') with no indication that language selection is optional or that the template is intended only for a Chinese-language context. This creates a natural-language policy issue because it imposes a specific language on users without opt-in.
This markdown template includes Chinese-only section labels such as "状态" and "最近一次检查点" without any indication that language selection is optional or region-specific. That can violate a language/locale policy when a skill implicitly forces a specific language without user opt-in.
The template headings and field labels from L05 onward are largely written in Chinese, with only partial English glosses. This can impose a specific language/locale on users without opt-in, which matches the policy category for language or locale constraints.
No suspicious patterns detected.
