Security audit
Security checks for vulnerabilities and agentic risk
This is a text-only Chinese marketing guidance skill with no code execution, persistence, credential use, or hidden data access.
Install this if you want Chinese-language marketing and social-media copy assistance. Be aware it may activate on common marketing terms like SEO or 小红书, and its platform/legal guidance should be checked against current platform rules and advertising requirements before relying on it professionally.
The manifest declares a fixed language setting of "zh-CN", and the document content is entirely presented in Chinese without any indication that users can choose another language. The policy requires flagging language or locale constraints when they are forced without user opt-in or a clearly justified region-specific limitation.
The manifest sets the language to "zh-CN", which indicates a fixed locale preference, and the surrounding metadata does not mention that users may choose another language. Under the policy, forcing a specific language without opt-in is a natural-language policy concern unless clearly justified as region-specific.
The trigger list includes very broad terms such as 'SEO', '小红书', '抖音', and '涨粉' that are likely to appear in ordinary user conversations, making unintended activation plausible. This can cause the skill to inject marketing-oriented behavior into unrelated sessions, reducing user control and potentially steering outputs in ways the user did not explicitly request.
No suspicious patterns detected.
