Security audit
Security checks for vulnerabilities and agentic risk
This is a document-only contract review workflow skill with clear legal disclaimers and no code execution, network access, credentials, or persistence.
Before using it, treat outputs as planning aids only and have qualified counsel verify jurisdiction-specific law, deadlines, confidentiality duties, citations, and legal strategy. Avoid pasting sensitive contract material unless your environment is approved for that data.
The front matter sets language: en, and the acceptance criteria later require the documentation to be 'English-first'. This creates a language preference constraint without explaining that users may choose another language or that the limitation is required for a justified region-specific purpose.
The phrase 'SKILL.md and README.md are English-first' imposes a default language policy. Although the file includes a Chinese-language scenario, it does not explicitly offer multilingual support or user opt-in for language selection, so the wording may conflict with organizational expectations around user language choice.
The manifest sets the skill language to "en", which is a natural-language locale constraint. Under the policy, locale restrictions should either offer user choice/opt-in or be clearly documented and justified; this file does not provide that context.
The trigger section uses general phrases such as "contract review" and "agreement checklist" without narrowing context or giving exclusion conditions. In a markdown skill description, this can create ambiguous activation because these phrases are common requests and the file does not clarify when the skill should or should not be invoked.
No suspicious patterns detected.
