Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese smart-reply helper that runs locally and does not request credentials, network access, installation, or persistence.
Install this only if you want canned Chinese reply suggestions. It appears low risk because it runs locally without credentials, network calls, file access, or persistence, but it is not a general multilingual reply assistant.
The skill name, description, examples, and scope all specify Chinese social reply generation, including '中文社交回复规范', but there is no opt-in or alternative language option described. This is a natural-language policy concern because it imposes a specific language/locale by default rather than offering user choice or clearly justifying the restriction as region-specific.
The module description, usage text, scenario names, and outputs are all Chinese-only, which effectively forces a specific language/locale for users. The policy allows locale constraints only when there is user choice, opt-in, or clear documented justification, none of which is present here.
No suspicious patterns detected.
