Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language code-assistant skill with prompt templates for explaining, diagnosing, refactoring, and documenting code, and it does not show hidden access, persistence, or data exfiltration behavior.
Install only if you are comfortable with a Chinese-language code assistant and with broad coding requests potentially matching this skill. Do not rely on main.py as-is without fixing the HTML-escaped syntax if executable behavior is expected.
The natural-language content of the skill, including its description, headings, and usage examples, is entirely in Chinese and does not indicate that users may choose another language. Per the policy, forcing a specific language without user opt-in is a locale/language policy violation unless the restriction is explicitly documented and justified.
The skill advertises activation through very generic phrases such as asking to explain code, find problems, optimize code, or generate documentation. Without clear boundaries or an explicit invocation pattern, the skill may activate unintentionally during ordinary conversation, causing unwanted behavior, prompt-scope confusion, or interception of tasks intended for other skills.
Multiple user-facing return strings are written only in Chinese, and the skill does not provide any opt-in, fallback, or documented justification for enforcing that language. This creates a natural-language policy issue because the skill implicitly forces a specific language on users regardless of preference or locale.
The prompt is entirely written in Chinese and mandates Chinese response formats such as '问题诊断报告' and the fixed Chinese pass message. This imposes a specific language/locale on users without offering a choice or documenting a justified region-specific constraint, which matches the language-policy violation criteria.
The prompt content is entirely written to direct operation in Chinese, including the title and required output structure, with no indication that the user can choose another language. This creates a language/locale policy concern because it imposes a specific language by default rather than offering opt-in or documenting a region-specific need.
The prompt is entirely written in Chinese and specifies a Chinese documentation template, which effectively constrains the skill to a specific language. There is no indication that the user can choose another language or that this locale restriction is justified by a region-specific requirement.
The prompt is entirely written in Chinese and specifies the role, task, and output format only in Chinese, which effectively constrains the interaction to a specific language. There is no indication that users may choose another language or that the locale restriction is justified by a region-specific purpose.
The manifest description includes Chinese-language instructional content alongside English branding, but does not state that the skill is region-specific or offer users a language/locale choice. Under the policy, forcing or implying a specific language without opt-in can be a natural-language policy violation.
No suspicious patterns detected.
