Security audit
Security checks for vulnerabilities and agentic risk
This is a read-only Feishu Markdown compatibility guide with no code execution, persistence, credential handling, or hidden high-impact behavior found.
Installers should understand that this skill is mainly a Chinese-language reference for Feishu Markdown compatibility. Treat the local ~/.claude/rules style-guide reference as optional unless you intentionally maintain that file, and rely on the packaged guidance when reviewing behavior.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
The manifest description and the entire skill guide are written only in Chinese, with no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking or region-specific audience. This creates a natural-language policy concern because the file effectively imposes a language constraint without opt-in or documented justification.
The title and opening description present the specification entirely as a Chinese-language standard for Mermaid usage, and the rest of the document consistently instructs in Chinese without any opt-in, alternative locale, or justification that this must be Chinese-only. Under the language/locale policy, forcing a specific language without user choice is a natural-language policy violation.
The manifest describes this skill as a Feishu Markdown compatibility specification covering Mermaid, tables, callouts, formulas, images, and API fault tolerance before import. Line L555 directs users to ~/.claude/rules/markdown-style-guide.md, which is a separate local rules source and not part of the declared compatibility guide scope, introducing an external dependency unrelated to the stated purpose of this file itself.
No suspicious patterns detected.
