Security audit
Security checks for vulnerabilities and agentic risk
The skill provides informational working-capital advice and does not appear to access accounts, move money, call external services, or persist data.
This appears safe to install for informational cash-flow and working-capital planning. Users should treat its financial recommendations as general guidance, verify current rates or product claims, and consult a qualified professional before acting on major financing or supplier-payment decisions.
The file includes an example scenario and expected output entirely in Chinese, but nowhere indicates that the skill is bilingual, locale-specific, or that users may choose their preferred language. This can violate language/locale policy by implicitly forcing a specific language experience without user opt-in.
The manifest sets the skill language to "en" with no indication that users can choose another language or that the English-only constraint is required for a region-specific or compliance reason. This is a natural-language policy concern because it imposes a locale choice without opt-in.
The examples present one scenario entirely in Chinese and others in English, but the document does not state whether the skill supports multiple languages or let the user choose a preferred language. This can be read as implicitly forcing output/input expectations by locale without an explicit opt-in or language-selection policy.
Line L110 includes the Chinese comment "其他skill类似" in a file that otherwise uses English, which introduces a language-specific instruction/context without any user choice or documented locale justification. This matches the policy category for language or locale violations in natural-language content.
No suspicious patterns detected.
