Security audit
Security checks for vulnerabilities and agentic risk
This is a Markdown-only Chinese novel-writing assistant whose Feishu document workflow is disclosed and aligned with its collaboration purpose.
Install this if you are comfortable using Feishu for generated novel-planning and drafting documents. Avoid putting confidential, unpublished, or personally sensitive material into the workflow unless your Feishu workspace permissions and retention settings are acceptable.
The skill states that all documents are automatically generated in Feishu, but it does not clearly disclose to users that their prompts, story ideas, and writing content may be stored or synchronized to an external system. This creates a privacy and data-governance risk because users may share sensitive unpublished material or personal information without informed consent.
The trigger list includes broad, common phrases such as '创作灵感' and '帮我写小说', which can cause the skill to activate in contexts where the user did not explicitly request this workflow. Overbroad activation can lead to unintended collection of user content and unexpected initiation of the skill's document-generation behavior, especially because the skill is stateful and integrated with Feishu.
This markdown template is entirely structured in Chinese and does not indicate that language selection is optional. Under the policy criteria, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.
This markdown file presents the skill example and usage guidance exclusively in Chinese, with no indication that the user can choose another language or locale. Under the stated policy, forcing a specific language without opt-in is a natural-language policy concern.
This markdown template forces a single language/locale for all users through its headings, field labels, and instructions. Under the policy, language constraints should either offer user choice or be explicitly justified as region- or audience-specific.
No suspicious patterns detected.
