Security audit
Security checks for vulnerabilities and agentic risk
This is a simple local Chinese todo-list skill that stores todos in a disclosed local JSON file and shows no evidence of hidden, remote, destructive, or deceptive behavior.
Install this only if you want a Chinese-language local todo tracker. Todo text is saved on disk at ~/.qclaw/workspace/todos.json until changed or removed, so avoid storing confidential personal, customer, or business details unless local retention is acceptable.
The skill advertises executable commands that read and write a local JSON file, but it does not declare any explicit tool scope or permissions. This can mislead users or hosting systems about the skill's filesystem access, reducing transparency and weakening least-privilege controls even if the intended behavior is only todo storage.
The module docstring explicitly labels the skill as Chinese-only, and the command descriptions and output strings throughout the file are in Chinese. This creates a natural-language locale restriction without any user opt-in or documented justification, which matches the language/locale policy violation criteria.
The skill notes the storage path, but it does not clearly warn users that task contents are persisted on disk and may contain sensitive personal or business information. Users may enter confidential tasks without understanding that the data remains locally stored, creating privacy and data-retention risk.
No suspicious patterns detected.
