Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Chinese-language workflow skill for turning book-based research into a new skill, with workspace writes and web/book retrieval that fit its stated purpose.
Install only if you want a Chinese-first research workflow that may create local qbs-runs outputs, update its library registry, and fetch or download book materials. Use authorized sources for any books and review generated child skills before installing or using them elsewhere.
The manifest description says the skill triggers when the user says the exact Chinese phrase "拷问书籍方法论", and the rest of the document presents the workflow entirely in Chinese without indicating that other languages are supported. This is a natural-language locale constraint that is not framed as optional or justified as region-specific.
The skill states it will persist run artifacts under qbs-runs/<run-slug>/ and register generated skills in references/library.json, but it does not prominently warn the user or obtain consent before modifying the workspace. In an agent setting, silent file writes can create unexpected state changes, overwrite data, or leave sensitive research traces that users did not intend to store.
The skill explicitly directs the agent to download ebook files from public hosting without requiring a user-facing warning or explicit consent about copyright status, privacy exposure, or local storage of retrieved materials. Although it also says not to bypass access controls or purchase without authorization, it still normalizes acquisition and storage of copyrighted content in a way that can lead to unauthorized downloads, data retention, or compliance issues.
This file is a markdown skill reference, so natural-language policy checks apply. Nearly all operational guidance is written in Chinese, and the document does not state that the skill is region-specific or that users may choose another language, which can amount to forcing a specific language without user opt-in.
The instruction "领域关键词必须中英双语" imposes a fixed language requirement in natural-language policy, regardless of the user's stated language preference. This is a locale/language constraint and the document does not present it as optional or user-selected.
This JSON file contains natural-language content that forces a specific language context in the scope field. Under the policy, locale or language constraints should either be user-selectable or clearly justified as region-specific; neither is evident here.
No suspicious patterns detected.
