Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward design handoff document generator with no hidden execution, credential use, persistence, or destructive behavior found.
Before installing, consider whether your team wants Chinese-language handoff templates and broad trigger terms. The skill appears safe for generating design specs, but users may want clearer language selection or narrower activation rules for mixed-language or mixed-domain workflows.
The skill content is heavily Chinese-default in headings, required inputs, and output structure without explicitly offering language selection. This can cause the agent to respond in a language the user did not request, leading to usability failures, misunderstandings, and potentially incorrect handoff artifacts for multilingual teams.
The trigger list includes very broad terms such as '交付', '标注', and 'handoff' that can appear in many ordinary conversations, increasing the chance that this skill activates when the user did not intend to request a design-handoff workflow. Over-broad activation can cause incorrect routing, unnecessary collection of project/design details, and reduced reliability of the agent, especially in mixed-domain chats.
The entire template is written in Chinese and presents all headings, labels, and checklist items in a single fixed language. There is no indication that the skill is China-specific or that users may opt into another language, which can violate a language/locale policy requiring user choice or documented justification.
The entire template, including headings, labels, and footer text, is written only in Chinese and does not indicate that the user can choose another language. Under the policy, forcing a specific language without opt-in is a natural-language policy violation unless the locale constraint is explicitly justified.
The entire template, including its title and section labels, is written only in Chinese and presents a fixed-language deliverable format. Under the policy, a skill should not force a specific language or locale unless it offers choice or clearly documents a justified region-specific constraint.
This markdown template is entirely written in Chinese and provides no indication that language selection is configurable or based on user preference. Under the policy, forcing a specific language or locale without opt-in is a natural-language policy concern.
This markdown file presents all instructions in Chinese and does not indicate that users may choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.
Line L81 states '不要用中文：文件名统一英文', which imposes a specific language convention as a blanket rule. Under the policy criteria, forcing a language without opt-in or documented locale-specific justification is a natural-language policy violation.
No suspicious patterns detected.
