Security audit
Security checks for vulnerabilities and agentic risk
This is a simple local color conversion helper with no evidence of hidden access, persistence, credential use, or network execution.
Install only if Chinese-language documentation and output are acceptable. Also note that the current script appears much narrower than advertised: it handles direct 6-digit HEX input but does not implement the documented palette, gradient, or command-style conversions.
This markdown file uses Chinese for the name, description, instructions, and examples, but does not indicate that the skill is region-specific or provide any opt-in for language/locale. Under the policy, forcing a specific language without user choice is a natural-language policy concern.
The code returns the string '无效颜色格式' for invalid input, which forces a specific language in user-facing output. There is no indication that the skill is region-specific or that users can opt into this locale, so it conflicts with the policy against unprompted language constraints.
No suspicious patterns detected.
