Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed career-coaching reference skill with no code execution or persistence, though its advice is narrowly framed around young women job seekers.
Install only if you want a Chinese-language, persona-styled career coaching skill. Review its demographic framing and broad activation wording; users outside that target audience may want more neutral career advice, but the package does not show security-dangerous behavior.
The skill hard-codes a gender-specific target audience ('20~25岁女生求职者') and tailors behavior on that basis without user opt-in. This creates discriminatory treatment risk and can lead to stereotyping, exclusion, or mismatched assistance for users who do not identify with that demographic.
The key reminders repeat gender-specific audience targeting and instruct the model to shape communication around a presumed female demographic. Repetition in core instructions makes the biased behavior more persistent and likely to affect all outputs, reinforcing discriminatory assumptions across interactions.
The audience list includes "对互联网/AI行业好奇但不太了解的女生", which introduces a gender-specific framing in the skill's natural-language description. This may create an unnecessary demographic restriction or preference without documenting user opt-in or a justified region/compliance need.
The trigger description is extremely broad, covering many common job-seeking and career-related phrases. This can cause unintended activation in unrelated conversations, increasing the chance the skill overrides more appropriate behavior or injects irrelevant guidance without clear user intent.
The skill description explicitly states that 90% of target users are 20–25-year-old women job seekers, which introduces demographic targeting without any indication of user opt-in or necessity for safe operation. This can lead to biased personalization, exclusionary behavior, or gender/age-based assumptions in downstream responses, especially in a job-seeking context where fairness and neutrality are important.
The document title and introductory guidance are entirely in Chinese and frame the skill's explanations and interaction style as Chinese by default. There is no indication that users may choose another language or locale, which can violate language/locale policy when applied to a general-purpose skill.
The content explicitly frames advice toward '20~25岁女生' and includes gender-specific guidance such as '女生求职的隐形优势,' which can steer interactions based on gender without confirming user preference or necessity. In a job-seeking support skill, this creates a meaningful risk of biased or exclusionary treatment, potentially leading to unequal guidance quality, stereotyping, or alienating users outside the targeted demographic.
The README suggests generic phrases like "帮我模拟面试" and "简历怎么写平台运营这段" as direct invocation examples, but it does not define whether these are the exact triggers, acceptable variants, or when the skill should not activate. Because these phrases overlap with ordinary conversation about job search and interview prep, the activation scope is somewhat ambiguous.
Forcing emoji use and a fixed '学姐' style constrains responses to a narrow social register regardless of user preference or context. While lower severity than demographic targeting, it can still reduce accessibility, professionalism, and user autonomy, especially in formal resume or interview scenarios.
