Security audit
Security checks for vulnerabilities and agentic risk
This is a document-only legal due diligence checklist skill with clear legal disclaimers and no executable or hidden behavior.
Installers should treat this as an informational legal workflow aid only. Do not rely on it as legal advice, and verify jurisdiction-specific requirements, deadlines, confidentiality duties, and transaction strategy with qualified counsel.
The acceptance criteria state that SKILL.md and README.md are "English-first," which imposes a language preference as a policy requirement. Under the policy rules, forcing a specific language without user choice or clear region-specific justification is a natural-language policy violation.
The package rules explicitly require the package to remain "English-first," which is a language policy constraint. Because no opt-in, alternative language support, or justified locale limitation is provided, this conflicts with the stated natural-language policy requirements.
The manifest header sets language: en and the acceptance criteria state the markdown should be English-first, but Scenario 4 is written entirely in Chinese. This creates a language/locale inconsistency without user opt-in or an explicit multilingual policy, which fits the language-policy violation category.
The manifest sets "language": "en", which is a natural-language locale constraint. The file does not indicate that users can opt into another language or that the English-only behavior is required for a region-specific or otherwise justified purpose.
No suspicious patterns detected.
