Security audit
Security checks for vulnerabilities and agentic risk
This is a localized video-writing helper skill with no hidden execution, persistence, credential access, or destructive behavior found.
Before installing, note that the skill is primarily written for Chinese-language short-video workflows. It appears safe from a security perspective, but users who want multilingual behavior may prefer clearer language-selection documentation.
This markdown file describes usage through generic phrases like “写个抖音脚本”, “这个视频配字幕”, and “改B站风格” but does not clarify whether these are the exact trigger phrases, examples only, or how activation is bounded. Because the skill provides no explicit trigger scope, exclusions, or negative examples, these broad requests could overlap with ordinary user speech and cause unintended invocation.
The manifest description forces a specific language presentation without stating that users may choose another language. Under the language/locale policy, a fixed language is a concern unless the skill offers user choice or documents a justified locale restriction.
This shell script emits all user-facing messages in Chinese, including test labels, expectations, and warnings. Because the file provides no opt-in, fallback language, or justification for a Chinese-only locale, it can violate a language/locale policy requiring user choice or explicit documentation.
