Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple local timestamp conversion tool with no evidence of hidden access, persistence, network use, or unsafe behavior.
Safe to install from a security perspective. Users who do not want Chinese-language output should note that README content and the human-readable diff field are Chinese-localized, although the main command interface and JSON keys are usable in English.
The human-readable time-difference strings are hardcoded in Chinese (for example, 天, 小时, 分钟, 秒, 前, 后). This imposes a specific language on users of the tool with no documented opt-in or locale-selection mechanism, which matches the language/locale policy violation criteria.
The skill description and examples are presented entirely in Chinese, which imposes a specific language on users without any opt-in or alternative language option. The file does not document that this skill is intentionally region-specific or limited to Chinese-speaking users.
The markdown includes an example using a Chinese-formatted date string (%Y年%m月%d日) as a showcased output format. While the tool supports multiple formats, this example introduces a locale-specific convention without any accompanying note that language/locale is optional or user-selected, which can conflict with language/locale policy expectations.
No suspicious patterns detected.
