Security audit
Security checks for vulnerabilities and agentic risk
This skill is a public company research report template that uses search and page fetching, with no evidence of hidden execution, persistence, or data theft.
Installers should expect this skill to perform live public web searches and fetch pages about companies, including legal, business, hiring, and news records. Use it where Chinese structured reports are acceptable, and verify sensitive business conclusions against authoritative sources before relying on them.
The skill content is written entirely in Chinese and strongly prescribes Chinese-language behavior without indicating that the agent should respect the user's language preference. This can cause unintended language switching, reduce usability, and create misunderstandings in multilingual or accessibility-sensitive contexts, though it is not a direct security exploit.
The package description explicitly states the skill generates reports in Chinese, which can bias or force output language without user opt-in. This is dangerous because it can override user expectations, reduce usability for other audiences, and act as an undeclared behavioral constraint that may conflict with higher-level system or user instructions.
No suspicious patterns detected.
