Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed business due-diligence skill that guides analysis of service-industry companies, with sensitive data use expected for that purpose but requiring careful handling by the user.
Before installing, confirm you are comfortable using a Chinese-language due-diligence template and only provide customer, CRM, financial, bank-flow, or operational records when you have authorization. Prefer aggregated or anonymized data, redact unnecessary personal information, and treat generated reports as confidential business documents.
The file’s user-facing instructions and description are presented only in Chinese, and there is no indication that users may choose another language or that the skill is intentionally restricted to a Chinese-speaking or China-specific context. This can violate language/locale policy requirements when a skill implicitly forces a specific language without user opt-in.
The skill explicitly directs collection and analysis of customer, CRM, operational, and financial data, including public scraping and enterprise-provided internal records, but does not include any privacy, consent, minimization, retention, or redaction guidance. In a due-diligence workflow, this omission can cause the agent or user to ingest sensitive personal data and confidential business information inappropriately, increasing the risk of privacy violations, over-collection, or unauthorized disclosure.
The document requires that all reports strictly follow a fixed chapter structure and specifically prescribes an English section label such as 'Executive Summary'. This imposes a language/locale convention on output without stating that the user can choose another language or locale, which may conflict with organizational language-choice policies.
This markdown file presents all headings, labels, and instructions exclusively in Chinese, which can constitute a language/locale policy issue when no user opt-in or stated regional constraint is provided. The file does not indicate that the skill is intended only for a Chinese-speaking or China-specific context.
No suspicious patterns detected.
