Security audit
Security checks for vulnerabilities and agentic risk
This is a descriptive business-planning skill with no executable components or external actions.
Safe to install for generating partnership assessment frameworks. Users should avoid treating its outputs as legal, financial, tax, anti-corruption, or compliance due diligence and should review sensitive partner or financial information before sharing it with any AI tool.
Line L14 states that documentation must be "English-first," which is a natural-language locale constraint. Because the file does not mention user opt-in, multilingual support, or a region-specific justification, this can conflict with language/locale policy expectations.
The file presents a usage scenario entirely in Chinese, which introduces a specific language in the skill content without stating that users can choose their preferred language. Under the stated policy, locale or language constraints should be optional or justified; here, no opt-in or explanation is provided.
The manifest sets "language": "en", which is a natural-language constraint. Nothing in the file indicates that users may opt into another language or that English-only behavior is required for a documented region-specific or compliance reason.
No suspicious patterns detected.
