Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed training-transcript summarizer that reads user-provided or tmeet-provided meeting content and generates a Markdown training handbook.
Install only if you are comfortable with a Chinese-language workflow and with giving the agent or tmeet access to the meeting transcripts you want summarized. Review generated handbooks and quiz questions before using them for formal training or assessment.
The entire skill description, examples, commands, and outputs are presented only in Chinese, and the skill name itself is Chinese. There is no indication that users may choose another language or that the skill is intentionally limited to a Chinese-only compliance or regional context, which creates a natural-language locale policy concern.
The skill instructs the agent to read user-provided transcription/minutes files in a 'local mode' and to generate a Markdown handbook, which implies file read and file write behavior, but the manifest does not declare any explicit tool scope or permissions. Undeclared capabilities make it harder to enforce least privilege and can let the skill access or create files more broadly than reviewers or the runtime expect.
This code file contains natural-language instructions and output that are entirely fixed to Chinese, including the module docstring and generated content. Under the policy rule, forcing a specific language without user opt-in is a locale/language policy violation unless the constraint is explicitly justified, which is not stated here.
该培训手册全文仅以中文呈现，且未说明是否支持其他语言，也没有提供用户选择语言的选项。根据规则，强制特定语言而无用户选择或明确合理说明，属于自然语言层面的语言/locale policy 问题。
This markdown template presents all user-facing instructions and content structure in Chinese, which can constitute a language policy issue when no alternative language option or opt-in is provided. The file does not indicate that the Chinese-only format is region-specific or explicitly chosen by the user.
