Security audit
Security checks for vulnerabilities and agentic risk
This is a local Chinese-language percentage calculator with no network, credential, persistence, or privilege behavior in its runtime code.
Installers should expect a simple local calculator with Chinese prompts and output. The promotional links in the README are unrelated to calculation, so avoid following them unless you trust the publisher.
This markdown file describes activation through phrases prefixed with "千策" but does not specify whether that is the only valid trigger, what contexts it applies in, or any negative examples. The lack of trigger scope makes invocation conditions ambiguous and could cause unintended activation if the phrase overlaps with ordinary assistant usage.
The skill name, description, usage, and examples all prescribe Chinese-language interaction, but the file does not indicate that this is optional or limited to a China-specific deployment. That can be a language-policy concern when users are not given a choice of locale or language.
The skill is presented throughout as a pure local calculator with no API usage, focused on percentage-related computations. The addition of vendor marketing links and a call-to-action to visit an external site introduces behavior/purpose content outside that described calculator scope, creating a mild description-to-content mismatch.
This code file presents its title and user-facing description entirely in Chinese, and later user-facing prompts and labels are also Chinese-only. Under the policy rule for natural-language violations, forcing a specific language without opt-in or documented regional justification can be a locale-policy issue.
The argparse description, help text, error message, and printed result labels are all hardcoded in Chinese, giving users no language choice. This is a natural-language policy concern because the skill enforces a specific language across its interface without explicit opt-in or documented scope limitation.
