Security audit
Security checks for vulnerabilities and agentic risk
This skill is a Chinese-language ISO 9001 management-review assistant that creates local review documents, with no evidence of hidden execution, credential use, network access, or persistence beyond disclosed output files.
Before installing, treat generated management-review files as potentially sensitive business records. Use the skill in a deliberate working folder, review generated documents before sharing, and do not provide confidential audit or performance data unless you are comfortable storing it in local output files.
The description is written as a fixed Chinese-language operating mode and does not mention any option to use another language. This can violate language/locale policy expectations when a skill forces a specific language without user opt-in.
The skill explicitly states it will write multiple txt/md files into the user's working directory, but it provides no requirement to ask for confirmation, preview outputs, or let the user choose paths before writing. Unprompted file creation can overwrite existing documents, leak sensitive management-review content into unintended locations, or be abused to persist data on disk when the user expected a conversational-only interaction.
No suspicious patterns detected.
