Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple Vue2 project risk checker that reads local project files and runs npm audit, with no hidden persistence or destructive behavior found.
Before installing, understand that this is a lightweight helper, not a full Vue2 security audit. It reads local project configuration and package data and may run npm audit against the npm registry; review the results manually and use broader security tooling for CI gating.
The skill advertises broad Vue2 risk scanning coverage, including Webpack and Babel configuration analysis, but the described behavior and static finding indicate those checks are not actually implemented. This can create a false sense of security in CI or developer workflows, causing users to rely on incomplete results and miss real security issues in the unscanned areas.
The script includes natural-language comments in Chinese (for example, '检查') without indicating that the skill is intentionally localized or limited to Chinese-speaking users. This can violate language/locale policy when a skill implicitly forces one language in its user-visible or maintainer-facing instructions without opt-in or justification.
The script includes natural-language comments in Chinese (e.g. '检查') without offering any language choice or documenting a locale-specific requirement. This can violate a language/locale policy when organizational standards require user-facing or maintainable skill content to avoid forcing a specific language by default.
Detected: suspicious.dynamic_code_execution
