Security audit
Security checks for vulnerabilities and agentic risk
The skill is mostly a disclosed pharmaceutical research workflow, but it automatically uploads generated research reports to a configured Google Drive remote without explicit user confirmation.
Review this skill before installing if your target research may include proprietary strategy, confidential context, or sensitive competitive analysis. Use it only in an environment where the configured rclone gdrive remote is trusted, access-controlled, and intended for these reports, or modify the workflow so cloud upload is opt-in and local-only is the default.
SKILL.md:179Automatic External Transfer of Potentially Confidential Research Reports
The trigger condition is phrased to activate on essentially any mention of common drug targets such as KRAS, BTK, or EGFR, even when the user did not ask for target research. Over-broad activation can cause the agent to hijack unrelated conversations, collect unnecessary external data, and perform unintended actions such as report generation and cloud upload based on weak intent signals.
The skill metadata and output contract force Chinese output and a specific report format without checking the user's language preference or consent. This can override user intent, reduce usability, and increase the chance of disclosing or exporting detailed research artifacts in a format the user did not request, especially in multilingual environments.
Suspicious Unicode normalization or mixed-script content
The title and entire prompt template are written as a fixed Chinese-language instruction set, indicating the skill expects or enforces output in Chinese. There is no visible opt-in, language-selection mechanism, or documented justification for restricting the skill to a specific language/locale.
This markdown template is written entirely in Chinese and the embedded HTML explicitly sets lang="zh-CN", which imposes a specific language/locale on generated output. The file does not indicate that Chinese is optional, user-selected, or required for a region-specific compliance reason, so it fits the policy-violation criterion for forced language/locale.
The file title and all operational instructions are written in Chinese, and there is no indication that another language is supported or that the user can choose their preferred language. Under the policy for natural-language constraints, this is a locale/language restriction that is not presented as optional or region-specific.
No suspicious patterns detected.