Security audit
Security checks for vulnerabilities and agentic risk
This is a descriptive hiring and overseas team-planning skill with no executable code, network access, credentials, persistence, or hidden side effects.
Installers should treat the output as planning support, not legal, tax, immigration, or employment advice. Provide only the business and hiring context needed for the plan, and verify jurisdiction-specific recommendations with qualified local professionals before acting.
The phrase "Documentation is English-first" imposes a language preference in natural language. Under the policy, language constraints should either offer user opt-in/choice or be clearly justified as region-specific; this line does neither.
The phrase 'Or just describe your overseas team-building challenge' is an open-ended activation cue without clear scope boundaries or exclusion conditions. While the domain is somewhat constrained, this wording is broad enough to match many general requests about international hiring or management without specifying what does not qualify.
A Chinese-language scenario is embedded alongside English content, but the document does not explicitly state that response language should follow user preference or input language. This can create ambiguity around language/locale behavior and may conflict with organizational language-choice expectations if the skill implicitly switches languages without opt-in.
The manifest sets the skill language to "en", which imposes a specific language/locale choice. Under the stated policy, this is a finding unless the skill offers user language choice or clearly documents a justified locale restriction, neither of which appears here.
No suspicious patterns detected.
