Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese operations-research modeling helper with an optional, disclosed academic paper search script that sends search terms to public research APIs.
Before installing, be aware that paper searches send your search keywords to OpenAlex and Semantic Scholar. Avoid including confidential business details, personal data, or proprietary model inputs in those search terms unless you are comfortable sharing them with those services.
The skill instructs the agent to run a network-capable script (paper_search.py) but does not declare any permissions or allowed-tools scope. This creates an authorization ambiguity where the skill may invoke outbound network access without explicit least-privilege boundaries, increasing the risk of unintended data egress or misuse of network-enabled tooling.
该技能的名称说明、流程、模板和输出示例均以中文固定呈现，未见允许用户选择语言或根据用户语言偏好调整输出的说明。按照语言/地区策略，强制单一语言而无用户选择属于自然语言政策风险。
The fast-confirmation trigger accepts broad everyday phrases like “可以” or “没问题” as approval to skip itemized confirmation. In practice, this can cause the agent to bypass clarification and proceed on incorrect assumptions, which is a control-flow weakness that may degrade safety, accuracy, or policy compliance for consequential modeling tasks.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API Endpoints
OPENALEX_API = "https://api.openalex.org/works"
SEMANTIC_SCHOLAR_API = "https://api.semanticscholar.org/graph/v1/paper/search"
# Retry configuration
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API Endpoints
OPENALEX_API = "https://api.openalex.org/works"
SEMANTIC_SCHOLAR_API = "https://api.semanticscholar.org/graph/v1/paper/search"
# Retry configuration
MAX_RETRIES = 3
This markdown reference uses Chinese throughout, beginning with the title at L001, and does not indicate that the language choice is optional or limited to a specific regional audience. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.
No suspicious patterns detected.