Security audit
Security checks for vulnerabilities and agentic risk
This is a local daily/weekly report generator with limited file read/write behavior and no evidence of hidden execution, persistence, credential access, or data exfiltration.
Install this if you want a Chinese-oriented local Markdown daily/weekly report generator. Review the scripts before using user-supplied output paths, and be aware that the promotional links in the skill text are informational links, not required for operation.
The skill description and usage instructions are entirely in Chinese and present Chinese trigger phrases and output expectations without offering a language or locale choice. This can constitute a language-policy violation when the skill implicitly requires a specific language without user opt-in or documented justification.
The listed triggers include generic phrases like “写周报” and “汇总工作”, which are common requests in everyday work conversations and may cause unintended invocation. The README does not define scope boundaries, required context, or negative examples clarifying when the skill should not activate.
This code file contains natural-language strings such as the module docstring and CLI descriptions exclusively in Chinese. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified, which is not present here.
The markdown includes Chinese-language branding and marketing text at the end of the skill file. Because the skill otherwise targets general report generation and does not state that it is China-specific or provide a language/locale option, this creates a natural-language locale policy concern.
This Python file contains natural-language docstrings, comments, CLI descriptions, and output messages entirely in Chinese, which imposes a specific language/locale on users without any opt-in or alternative. The policy explicitly calls for flagging language or locale constraints when the skill does not offer user choice or document a justified regional limitation.
No suspicious patterns detected.
