Security audit
Security checks for vulnerabilities and agentic risk
This is a simple local Pomodoro planning skill with minor scope and language-quality issues, but no evidence of unsafe access, persistence, or data exfiltration.
Safe to install if you want a Chinese-language Pomodoro planner. Expect limited non-Chinese input handling and possibly broad activation from generic timer or work-planning requests.
All user-facing natural-language content in the skill is written in Chinese, and the file does not state that the skill supports multiple languages or that Chinese is a justified region-specific requirement. This can violate language/locale policy when users are not given an explicit opt-in or alternative.
The trigger phrases are generic everyday terms like '计时' and '学习/工作计划', which can cause the skill to activate for many unrelated user requests. Overly broad invocation increases the chance of accidental routing, unintended behavior, and abuse of the skill-selection mechanism even though the skill itself is low-risk.
The file hard-codes Chinese-only trigger parsing and user-facing output, including matching only '分钟' and returning messages such as '番茄钟已设置' and '未命名任务'. This creates a language/locale restriction without any opt-in or explanation, which matches the policy-violation category for forced language behavior.
The manifest uses the generic description "auto-generated skeleton," which provides no specific activation scope, trigger context, or constraints. In a manifest file, this lack of specificity can contribute to ambiguous invocation behavior because the skill's purpose is not distinguishable from other general actions.
