Security audit
Security checks for vulnerabilities and agentic risk
This is a small reporting skill that clearly describes scraping public WeChat mini game rankings and delivering the generated report through Feishu.
Before installing, make sure you are comfortable with the skill sending generated reports through Feishu and verify the intended recipient, especially if you add private business commentary or non-public analysis to the report.
The skill explicitly states it will create a Feishu document and send it via direct message, but it does not warn the user that generated content will be transmitted to an external messaging platform. This can lead to unintentional disclosure of scraped data, analysis outputs, or sensitive business context if users invoke the skill without realizing it performs outbound delivery.
The skill is centered on WeChat mini games, 应用宝, and Feishu, indicating a specific regional/language context, but the description does not explicitly state that the skill is intended for a China-specific market or offer any user choice around locale. Under the policy, forcing a specific language or locale without opt-in or clear justification can be a natural-language policy issue.
No suspicious patterns detected.
