Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language NPI quality-gate advisory skill with no executable code, persistence, or hidden data access, though users should treat its release labels as guidance rather than approval.
Install only if you want a Chinese-language manufacturing NPI gate-readiness assistant. Treat any pass, conditional-pass, or fail wording as advisory analysis for human review, not as formal release approval, and avoid pasting unnecessary full project records into the chat.
The skill metadata says it should not make release decisions, but this file explicitly provides a decision matrix for '放行 / 有条件放行 / 不放行' and tells the agent to use it for judgment. That creates a clear instruction-data conflict that can cause the agent to overstep its declared role and output operational gate decisions users may treat as authoritative.
The documentation embeds concrete logic that determines release outcomes despite the stated limitation that the skill does not make release decisions. In a manufacturing NPI context, users may rely on those outputs to advance or block a stage, so the contradiction materially increases the chance of unsafe automation or governance bypass.
L26-L27 将技能激活条件定义为“用户提到以下任一词”即可触发，其中“能不能放行”“遗留问题能不能带”等表述较宽泛，且未限定必须处于 NPI 门禁评审语境中。虽然列表中多数术语较专业，但该写法缺少负例或排除条件，仍可能在一般质量讨论中被误激活。
This markdown file contains natural-language guidance entirely in Chinese and instructs the agent how to explain decisions to users, implying a fixed language/locale behavior. Under the policy, forcing a specific language without user opt-in is a reportable natural-language policy violation.
The manifest explicitly states '不发表单模板' (does not provide form templates), but this document contains multiple structured templates and checklist tables, including a design verification test matrix template, PPAP checklist, and packaging verification matrix. That goes beyond advisory evaluation/guidance and directly supplies reusable forms users could fill out.
This markdown file contains user-facing instructions exclusively in Chinese from start to end. Under the language/locale policy, forcing a specific language without user opt-in or a documented region-specific justification is a natural-language policy violation.
This markdown file is written entirely in Chinese starting from the title, with no indication that the user can choose another language or that the content is intended only for a Chinese-speaking or region-specific audience. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.
SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all instructions and checklist content only in Chinese, and nowhere indicates that the skill is China-specific or that users may choose another language.
This markdown file is written entirely in Chinese and does not indicate that other languages are supported or that the language choice is optional. Under the policy rule for natural-language violations, a skill that implicitly enforces a specific language without opt-in can be flagged when no justification or alternative is provided.
No suspicious patterns detected.
