Security audit
Security checks for vulnerabilities and agentic risk
This is a simple emotion-journaling skill with no code execution, data access, persistence, or hidden behavior found.
Installers should understand this skill is for reflective emotional self-observation only, not clinical mental-health care. Users in crisis or with severe distress should seek professional or emergency support rather than relying on journaling prompts.
All natural-language instructions, examples, and interaction patterns in the README are Chinese-only, which implies a fixed language behavior. There is no indication that users may choose another language or that the Chinese-only scope is an intentional, documented regional constraint.
The example invocation "我也说不清自己怎么了，就是很不舒服，帮我整理一下" is broad, conversational language that could appear in many unrelated contexts. The README does not define clear trigger boundaries, exclusions, or a constrained invocation context, so the skill could be matched when a user is seeking general help rather than emotion journaling specifically.
The skill includes multiple expected outputs and response templates in Chinese and demonstrates the assistant replying in Chinese to user prompts, while the file does not state that language should follow the user's preference or that the skill is intentionally Chinese-only. Because this is a natural-language behavior policy issue applicable to all file types, it can lead to an implicit locale/language constraint without user opt-in.
No suspicious patterns detected.
