Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent code-art helper with local preview tools and no evidence of hidden persistence, exfiltration, or privilege escalation.
Reasonable to install if you want a Chinese-language skill for generating code-based artwork. Use a virtual environment if installing Pillow or NumPy, and only paste artwork HTML you trust into the comparison workbench because active HTML can run in your browser.
scripts/analyze_reference.py:14Unpinned Pillow Dependency Installation
scripts/preview_canvas.py:18Unpinned NumPy and Pillow Dependency Installation
代码的核心功能是一个配套调试/预览工具：在没有浏览器环境时，把 HTML 中的 Canvas 绘制逻辑手工翻译到 Python 中，再用 Pillow+numpy 生成 PNG 供视觉自查。它确实与“代码绘画”领域相关，但并不实现声明中的主要交付物和工作方式。声明强调的是直接用 HTML/SVG/Canvas/CSS 生成单文件网页画作；而实际代码是 Python 脚本，读取内置配置后渲染示例画面并保存多张 PNG 诊断图。两者在主要目的、技术栈和输出形式上都有明显差异，因此应判定为描述与行为不一致。
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<head>
<meta charset="UTF-8">
<title>画作还原对比工作台</title>
<!--
artwork-studio.html — html-code-painting 技能配套校验模板
用法：
1. 把 <原图BASE64> 替换为参照图的 base64（data:image/jpeg;base64,...）
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<head>
<meta charset="UTF-8">
<title>画作还原对比工作台</title>
<!--
artwork-studio.html — html-code-painting 技能配套校验模板
用法:
1. 把 <原图BASE64> 替换为参照图的 base64(data:image/jpeg;base64,...)
The manifest description is entirely written in Chinese and presents the skill behavior in that locale without any indication that the user may choose another language. Under the policy, language or locale constraints should either be optional or clearly justified as region-specific; neither is stated here.
The template injects arbitrary HTML into the DOM via innerHTML from the ARTWORK_HTML placeholder. In this skill’s context, the inserted 'artwork' is effectively untrusted code/content supplied during use, so it can include scripts, event handlers, iframe/object tags, or active content that executes in the opened HTML file, leading to XSS-like code execution in the local browser context and possible data exfiltration or unsafe local/network interactions.
The entire skill is written only in Chinese and provides no indication that language choice is optional or configurable. Under the policy for natural-language violations, forcing a specific language without user opt-in is reportable unless the locale constraint is clearly documented and justified.
The entire skill document is written in Chinese and does not indicate that other languages are supported or that the user can opt into this locale. Under the stated policy, forcing a specific language without user choice is a natural-language policy violation unless clearly justified as region-specific.
Suspicious Unicode normalization or mixed-script content
The file title and all instructional content are exclusively in Chinese, and line L04 uses mandatory language such as “以此为准绳” and “不得随性漂移,” leaving no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without opt-in is a natural-language policy concern.
This file contains natural-language interface text, usage instructions, and output descriptions exclusively in Chinese, which effectively forces a specific language for users. Under the policy, language constraints should either offer user choice or be clearly documented as justified for a region-specific tool.
The HTML declares lang="zh-CN" and all visible interface text is written in Chinese, with no indication that other languages are supported or that this locale restriction is optional. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
This markdown file contains user-facing instructional content exclusively in Chinese, and nowhere indicates that the skill is region-specific or that users may choose another language. Under the policy rule for natural-language violations, forcing a specific language without opt-in is a reportable issue.
The entire document is written in Chinese and includes prescriptive guidance such as '注释中文说明', which imposes a specific language convention. There is no indication that Chinese is optional, user-selected, or justified as a region-specific requirement, which matches the locale-policy violation criteria.