Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward novel-writing helper with no code execution, permissions, hidden data access, or persistence mechanisms.
Installers should know this skill may answer in Chinese by default and may activate on broad story-writing terms. Ask for English or a narrower style when needed.
The instruction 'Default to Chinese output unless the user asks for another language' imposes a language preference by default rather than offering a neutral choice. The policy allows explicit user choice or justified locale constraints, but this line applies a default language globally without opt-in or documented necessity.
The manifest uses several generic activation keywords such as "novel," "story," "chapter," "outline," and "plot" without constraining context or providing exclusion conditions. These broad terms can overlap with common writing or discussion requests, increasing the risk of unintended skill invocation.
The template instruction at L006 is written as a direct prompt in Chinese, and the rest of the file's template fields are also presented only in Chinese. This imposes a specific language/locale on users without any visible opt-in or alternative language option, which matches the language-policy concern for natural-language content.
The manifest mixes English and Chinese trigger keywords, but there is no documentation indicating that multilingual behavior is optional, user-selected, or region-specific. This can create an implicit language/locale policy issue because the skill is configured to activate on a specific language set without stating how language preference is handled.
No suspicious patterns detected.
