Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Chinese-language compliance checklist skill for demand promissory notes, with no bundled executable code or hidden install behavior.
Before installing, understand that this skill may process sensitive financial, contract, KYC, UBO, and SWIFT-related information you provide. Use it as compliance assistance, verify legal conclusions with qualified counsel, and require confirmation before saving or sharing any case-library updates.
The manifest description and main skill content are written entirely in Chinese and describe the skill as the default tool for relevant requests, but they do not state that responses are limited to Chinese or offer users a language/locale choice. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
The workflow tells the agent to classify and 'update' or archive cases into a case library without clearly warning that this may modify persistent records or a shared knowledge base. In an agent environment, ambiguous write behavior can cause unauthorized or accidental data integrity changes, especially if user-supplied case descriptions are ingested into stored repositories without confirmation or provenance controls.
