Security audit
Security checks for vulnerabilities and agentic risk
This is a simple local Base64 utility with user-directed file reads and writes, though its Chinese-only docs include some inaccurate examples and promotional links.
Install only if you are comfortable with Chinese-language documentation and a small local Python script. Use explicit output paths and avoid pointing outputs at important files unless you intend to overwrite them; also note that some examples in the documentation appear stale or unsupported.
The skill name, description, and usage documentation are entirely in Chinese, which can amount to forcing a specific language without user opt-in. The policy allows locale constraints when they are optional or clearly justified, but no such choice or justification is provided here.
The skill description states that it supports Base64 encoding/decoding of files, which implies reading from and writing to files, but it does not include any user warning about filesystem effects such as creating or overwriting output files. Under the markdown-file criteria, behaviors that could affect user data or system integrity should be disclosed.
The documentation includes a bulk directory operation (encode_dir ./my_folder) but provides no warning that it may process many files and generate outputs across a directory. For markdown descriptions, potentially broad effects on user data should be disclosed so users understand the scope before running the command.
The document presents the skill as a self-contained Base64 encode/decode utility using only Python standard library features, but the closing section promotes an external commercial site and diagnosis link. This creates an intent/documentation divergence because the file's stated purpose is a local encoding tool, while the documentation also serves unrelated marketing/navigation goals.
This code file contains user-facing natural-language descriptions and help text in Chinese only, beginning with the module docstring. The policy requires flagging language or locale constraints when the skill forces a specific language without user opt-in, and there is no indication that users can choose another language or that the Chinese-only interface is intentionally region-scoped.
The command description, examples, and argument help strings are all presented in Chinese, which imposes a language choice on users. Because no alternative language, opt-in, or documented locale justification is provided, this is a natural-language policy violation under the language/locale rule.
