Security audit
Security checks for vulnerabilities and agentic risk
This skill is a low-risk reward-planning helper that stays aligned with its stated purpose and does not request sensitive access.
Before installing, understand that this skill formats completed tasks into reward suggestions and may activate for general milestone-celebration requests. It does not make purchases, handle payments, store records, or access private accounts based on the inspected files.
Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.
def _load_prompt_template(skill_name):
return PROMPT_TEMPLATE
def _clean_text(value: Any) -> str:
Without declared permissions the skill's intent is opaque and cannot be validated.
The 'When to use' section and example prompts include generic phrases such as 'celebrate a finished task or milestone' and 'What is a good reward after finishing this project?', which overlap with ordinary conversation and are not paired with explicit exclusion conditions. Because the file does not define narrow trigger phrases or negative examples, the activation scope is ambiguous for a manifest-like markdown skill description.
The file includes 'Chinese name: 战利品奖励庆祝.' as a natural-language locale-specific element, but does not state that language selection is optional or user-driven. Under the policy, fixed language or locale choices can be problematic when not offered as an opt-in or otherwise justified.
No suspicious patterns detected.