Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed local batch-renaming helper; the main caution is that it can rename files in a chosen folder, so users should preview and back up first.
Install only if you want a Chinese-language local file renaming tool. Run with --dry-run first, use it only on folders you intentionally select, and keep a backup when renaming important files because the script does not prevent name collisions.
The skill describes and invokes a local batch-renaming script that reads directory contents and renames files, but the manifest does not declare any tool scope such as file read/write permissions. This creates an authorization and transparency gap: users and hosts cannot easily validate what filesystem access the skill expects, increasing the risk of unintended or overly broad file modification.
The file presents the skill name, usage instructions, and operational guidance entirely in Chinese. Under the policy criteria, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale restriction is explicitly documented and justified.
The help string for --ext is written only in Chinese (只处理该扩展名，如 .jpg), which imposes a specific language in user-facing text without any opt-in or alternative. The policy explicitly calls for flagging language or locale constraints when the skill does not offer a choice or clearly justify the restriction.
No suspicious patterns detected.
