Security audit
Security checks for vulnerabilities and agentic risk
This skill is a focused eNSP topology-file generator with no evidence of hidden execution, data theft, persistence, or privilege abuse.
Installers should expect the skill to create local `.topo` files for eNSP. Review generated topologies before opening them in eNSP, especially if using Cloud devices or adapter settings, but the reviewed artifact does not show hidden or unrelated behavior.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<?xml version="1.0" encoding="UNICODE" ?>
<topo version="1.3.00.100">
<devices>
<!-- Device definitions -->
</devices>
<lines>
<!-- Connection lines -->
The manifest says to "Always use" the skill when the user asks to "create, generate, or design a network topology diagram," which is a broad class of requests that can include many non-eNSP contexts. Although Huawei/eNSP examples are mentioned, the trigger logic does not clearly distinguish when generic topology-diagram requests should not invoke this skill.
Line L538 states charset | 1=UTF-8/ASCII, 134=GBK/Chinese, which introduces a language/locale-specific encoding option in the skill reference. Because the document presents this locale-specific setting without offering user choice guidance or explaining a region-specific requirement, it may conflict with language/locale neutrality policy.