Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent Chinese-language supplier quality agreement drafting and review guide with expected local document output and no evidence of hidden, destructive, or exfiltrating behavior.
Before installing, note that this skill is designed primarily for Chinese supplier quality agreement work and may create local report files. Use it with appropriate handling for confidential supplier, customer, contract, or legal-review material, and treat generated clauses as drafts for qualified legal review.
L136 explicitly states 中文文档, and the entire skill description/output naming is Chinese-centric without indicating user choice or opt-in for language. Under the policy, forcing a specific language is a natural-language policy violation unless the skill offers language selection or clearly documents a justified locale-specific constraint.
The skill explicitly instructs the agent to write Markdown and TXT files to local storage, but it does not clearly warn the user that files will be created or where they will be written. This can lead to unintended local side effects, confusion about data persistence, and accidental storage of potentially sensitive contract or supplier information on disk.
