Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent Chinese BI document-processing workflow that reads user-provided reference files and updates a question workbook, with no evidence of hidden execution, network access, persistence, or credential use.
Install this if you want a Chinese-language BI requirements helper that processes uploaded workbooks and reference documents. Use a copy of important Excel files, because the skill is designed to populate columns and add a new sheet to the workbook.
The skill name, description, and all operational instructions are written entirely in Chinese, with no indication that users may choose another language or that the skill is limited to a Chinese-language context for a documented business reason. This can be a language/locale policy issue under the rule when a specific language is imposed without opt-in.
The skill explicitly states later that it will fill columns in the original workbook and add a new sheet, but the description/input contract does not clearly warn users up front that their uploaded file will be modified in place. This can lead to unintended alteration of user data, integrity loss, or confusion in workflows that assume uploads are treated read-only unless clearly disclosed.
The file is entirely written as a Chinese-only skill and names the skill "数据字典" without any indication that users may interact in other languages or opt into Chinese. Under the policy, forcing a specific language without user choice is a natural-language policy violation unless the locale restriction is clearly documented and justified.
该描述使用“检查用户是否提供了‘表结构数据’文档，若存在则读取，否则跳过”来界定使用时机，但没有说明该技能在什么具体任务上下文中应被调用、何时不应调用，也没有列出明确触发短语或负例。对于 markdown/manifest 类文件，这种仅凭文档存在性触发的表述较为宽泛，可能导致在不需要表结构兜底时也被启用。
