Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed PRC contract-review instruction skill with no executable code, persistence, credential use, or hidden data movement, but users should be careful because contracts can contain sensitive information.
Install only if you are comfortable providing contract text to the agent environment. Redact unnecessary IDs, bank details, signatures, secrets, and unrelated confidential business information before use, and treat the output as review assistance rather than a substitute for a qualified PRC lawyer.
The skill explicitly encourages users to upload full contracts, including scanned documents for OCR, which commonly contain highly sensitive personal, financial, employment, and confidential business information. Without any warning, minimization guidance, or handling constraints, users may disclose more data than necessary, creating privacy, confidentiality, and compliance risk.
The description centers the skill on Chinese contract review and specifies output explanations in Chinese and English, which may impose a language/locale expectation without explicit user opt-in. Because the policy requires language constraints to be offered as a choice or clearly documented as justified, the wording would be safer if it explicitly stated that the specialization is PRC-law-specific and language output can be chosen by the user.
No suspicious patterns detected.
