Security audit
Security checks for vulnerabilities and agentic risk
This is a non-executable insurance-claims workflow reference skill with no requested tools, install hooks, persistence, or automatic access to customer systems.
Install only if you want a Chinese-language insurance-claims reference workflow. Do not paste full identifiers, bank account numbers, or detailed medical records unless they are minimized or masked, and treat any generated settlement, denial, fraud, notification, or closure text as a draft that must be checked in your institution's authorized systems by qualified staff.
Module 2 tells users the skill is not suitable for inpatient expense review, while Module 3 later provides exactly that workflow in detail. This inconsistency can cause operators or downstream agents to apply the wrong module, bypass intended review boundaries, or rely on conflicting guidance during real claims handling.
The 2026-09-10 maintenance note says the revision '删除…结案归档与通知类动作表述'. However, the current body still includes a full Module 8 for claim notifications and customer communication, plus case-closing/archiving guidance with explicit boundary handling. This is an active contradiction between change-log documentation and the actual content of the file.
The skill manifest description forces a specific language/locale presentation rather than explicitly offering multilingual output based on user preference. Under the stated policy, language constraints should be user-selectable or clearly justified as region-specific.
The activation and non-applicable scenarios define how the skill is used, but they are written only in Chinese and do not state that users may choose another language. This can amount to a locale/language policy issue unless the Chinese-only scope is justified.
