Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed web research workflow for finding and summarizing hard-to-locate public information, with no code execution, persistence, or credential access.
Before installing, consider that the skill is written in Chinese and is designed for expansive web research, including translated/local-language queries and third-party source checks. Use it for public-source research tasks, and make sure any sensitive competitive or regulatory research stays within legal and ethical boundaries.
The file’s natural-language description and operating instructions are entirely in Chinese, and there is no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking context. Under the language/locale policy rule, this is a natural-language policy concern because it imposes a locale without opt-in or justification.
The methodology instructs the agent to search in the target region’s native language whenever information is region-specific, without mentioning user awareness, consent, or safeguards. This can broaden data collection and query formulation in ways the user did not explicitly request, increasing the risk of over-collection, opaque search behavior, and potentially privacy- or policy-sensitive retrieval in cross-border contexts.
No suspicious patterns detected.
