Security audit
Security checks for vulnerabilities and agentic risk
This skill is a transparent planning helper that writes local markdown tracking files and does not include executable code, network access, or hidden persistence.
Install this only if you want a file-based planning workflow in your project directory. Expect it to create or update task_plan.md, progress.md, and findings.md, and ask the agent to adapt the language or file location if you need English templates or a dedicated subfolder.
The manifest description describes when to use the skill in broad, capability-based terms rather than providing specific invocation conditions or negative examples. This can cause unintended activation because many project-oriented conversations could match 'want project plans with subplans' or 'controlled execution' without clear boundaries.
The operational instructions are presented in Chinese, which effectively imposes a language requirement on users and downstream agents. There is no opt-in, bilingual alternative, or justification that this skill is intended only for a Chinese-language environment.
The skill instructs the agent to create and maintain files in the current working directory as a default behavior, but it does not require explicit user consent at the point of modification or warn that local files will be created/changed. In an agent setting, this can lead to unexpected filesystem writes, workspace pollution, or modification of sensitive project directories when the user only intended a conversational plan.
The markdown template uses Chinese section headings such as '关键发现', '决策记录', '验证命令/步骤', and '回滚步骤' with no indication that the skill is region-specific or that users may choose another language. This creates a language-policy concern because it imposes a specific locale in the template content without opt-in or justification.
This markdown template uses Chinese section headings and field labels throughout, such as '状态', '当前阶段', and '最近一次检查点'. Because the file provides no indication that the language is optional or intended only for a specific locale, it may violate a language-choice policy by imposing a specific language without user opt-in.
This markdown template presents its operational headings and prompts primarily in Chinese, with only partial bilingual labeling. The file does not indicate that Chinese is optional, user-selectable, or required for a region-specific purpose, which can violate language/locale policy expectations for neutral skill assets.
No suspicious patterns detected.
