Security audit
Security checks for vulnerabilities and agentic risk
This skill is a static color-palette advisor with no executable code, persistence, credential access, or hidden data movement.
Installers should be aware that much of the guidance and default output template is Chinese. This is suitable for Chinese-language design workflows, but non-Chinese users may need to ask the agent to translate or produce palettes in their preferred language.
The skill is largely written in Chinese and explicitly structures outputs and interaction prompts in Chinese without offering a language fallback. This can override or conflict with a user's preferred language, causing poor UX, misunderstanding of design guidance, and reduced accessibility for users who do not read Chinese.
The file is entirely in Chinese and provides no language choice or documented locale constraint, which can exclude or mislead users and downstream agents that expect English or multilingual support. In a design/advisory skill, inaccessible reference material can cause incorrect palette or accessibility guidance to be applied because consumers may not understand critical WCAG contrast details.
This markdown file contains user-facing natural-language content exclusively in Chinese, and there is no indication that the skill is region-specific or that users can opt into this language. Per the policy, forcing a specific language without user choice is a natural-language policy violation.
这是一个自然语言模板文件，全文均以中文固定呈现，且没有说明仅面向中文用户或提供其他语言/本地化选项。按规则，若技能在语言/地区上施加固定约束而未提供用户选择或正当范围说明，属于语言/locale 策略风险。
This markdown file presents all guidance in Chinese and does not indicate that the skill is China-specific or that users may choose another language. Under the natural-language policy rule, forcing a specific language without opt-in can be a locale policy concern.
No suspicious patterns detected.
