Security audit
Security checks for vulnerabilities and agentic risk
This skill is a low-risk local “answer book” that returns a random short answer and does not access sensitive data or persist changes.
Installers should treat this as an entertainment skill. The main practical caveat is that it may respond to broad “guidance” or oracle-style prompts, so users who want ordinary advice may need to be explicit.
The invocation description includes generic activators like "guidance," "needs a yes/no/wisdom-style answer," and "oracle," which could match many ordinary user requests not intended to invoke this specific skill. The trigger list also lacks negative examples or clear boundaries for when the skill should not activate.
The instructions require the agent to pick English or Chinese according to the user's detected language and state "Never mix languages in a single answer," which imposes a locale behavior without explicit user opt-in. The policy allows language handling when the user is offered a choice or the constraint is clearly justified, which is not present here.
The file explicitly sets 'Default language: en', and the CLI argument also defaults to English unless the user overrides it. The policy requires avoiding forced language or locale choices unless the user is given a choice or the default is clearly justified; here, the default preference is imposed rather than prompted.
No suspicious patterns detected.
