Security audit
Security checks for vulnerabilities and agentic risk
This is a guidance-only startup community discovery skill with no code execution, data access, persistence, or hidden behavior.
Installers should expect this skill to provide Chinese-language startup-community coaching. Consider narrowing its trigger phrases or adding language preference guidance, but no sensitive access or execution behavior was found.
The trigger keyword at line 10 ("find community") is broad and can match common entrepreneurial or self-help requests that are not specifically asking for this skill. Over-broad activation can cause unintended skill invocation, steering user interactions unexpectedly and creating prompt-routing ambiguity, though the skill content itself is not overtly harmful.
The trigger keyword at line 13 ("我该做什么业务") is highly ambiguous and overlaps with everyday entrepreneurial discussion. This can cause the skill to activate in many unrelated contexts, increasing the chance of misrouting, unwanted instruction injection into normal conversations, or suppression of better-matched skills.
All user-facing description and operating instructions are written exclusively in Chinese, with no indication that the user can choose another language. This can violate a language or locale policy when the skill implicitly constrains interaction language without explicit opt-in or justification.
No suspicious patterns detected.
