Security audit
Security checks for vulnerabilities and agentic risk
This is a simple local password-generator skill with no evidence of hidden access, persistence, network use, or destructive behavior.
This skill appears safe to install for local password generation. Be aware that generated passwords are printed to the console, and the documentation includes an external marketing link unrelated to password generation.
The skill name, description, keywords, headings, and usage examples are presented in Chinese only, which effectively forces a specific language for users without opt-in. The policy allows locale constraints only when they are explicitly offered as a choice or clearly documented as justified, which is not present here.
The file's user-facing natural-language strings and documentation are entirely in Chinese, including the module description and function docstring. Under the stated policy, forcing a specific language without user opt-in is a locale/language policy violation unless the constraint is documented and justified.
No suspicious patterns detected.
