Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language private tutor skill that stores learning plans and progress in local Markdown files, which is disclosed and aligned with its purpose.
Install with the understanding that your learning profile, schedule, progress, and Q&A notes will persist as local Markdown files. Avoid entering sensitive personal details, and delete the skill data files when you want to reset or remove that history. Enable web search only when current resource recommendations are needed.
The title, description, commands, templates, and system prompt are all presented in Chinese, which effectively constrains the skill's user-facing behavior to a specific language. There is no indication that users may choose another language or that the Chinese-only presentation is required for a region-specific purpose.
The skill persistently stores user learning goals, background, schedule, and progress in local Markdown files, which can include personal or sensitive information about routines, abilities, and interests. Because the skill does not clearly disclose this retention behavior or advise on minimization/consent, users may unknowingly expose personal data to later readers, backups, or other tools with filesystem access.
The markdown template is entirely written in Chinese, including headings such as '课程大纲' and '学习主题', with no indication that language selection is optional or that the skill is intentionally limited to a Chinese-speaking context. This creates a natural-language policy concern because it implicitly enforces a specific language without user opt-in.
This markdown file presents the skill content entirely in Chinese, including the title and all profile fields. Under the policy criteria, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is clearly documented and justified, which is not present here.
The file title is entirely in Chinese ("学习日志"), which indicates a fixed language choice in user-facing content. There is no indication that the user can select a preferred language or that the locale restriction is documented and justified.
The file title is entirely in Chinese, which indicates a fixed language choice in the skill content. There is no accompanying note offering language selection or explaining a required locale, so this may violate language/locale policy requirements.
No suspicious patterns detected.
