Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Markdown knowledge-base assistant that reads and updates a user-designated Knowledge wiki, with no evidence of hidden execution, exfiltration, or persistence.
Install this only for a Knowledge-style Markdown wiki you want an agent to read and update. Grant access to the intended Knowledge directory, review bulk rename or restructuring plans before approval, and keep source materials read-only unless you explicitly want them changed.
Referenced artifact was not completely inspected
发布 skill 时，应将 `Knowledge/schema/scripts/verify_wiki.py` 作为 skill 包内的 `scripts/verify_wiki.py` 随 `SKILL.md` 一起打包；根目录 wrapper 只属于当前 vault 的便利入口。
The skill describes operational behavior that requires reading local files (for example scanning source/, reading wiki/index.md, and inspecting many Markdown pages) but does not declare an explicit tool scope such as permissions or allowed-tools. That mismatch can cause the runtime or calling agent to infer broader access than users expect, reducing transparency and weakening least-privilege controls around local knowledge-base contents.
The document states '默认目录使用中文' and further requires directory and file names to use Chinese wherever possible, while discouraging English directory names. This is a natural-language locale policy constraint that forces a specific language preference rather than offering the user a choice or framing it as an optional convention.
No suspicious patterns detected.