Security audit
Security checks for vulnerabilities and agentic risk
This is a simple SQL query optimization helper with no evidence of hidden access, persistence, execution, or data exfiltration.
Review the skill if you need English output or tighter trigger wording, but from a security perspective it only provides static SQL advice and does not ask for sensitive access or make system changes.
The skill description is written as an imperative capability statement in Chinese and the rest of the document continues in Chinese, with no indication that users may choose another language. This creates a natural-language locale constraint without opt-in, which fits the policy category for language or locale violations.
The trigger patterns are generic and can activate the skill in broad contexts unrelated to a clearly bounded SQL-optimization task. Overbroad invocation increases the chance the agent will apply this skill unexpectedly, which can cause unsafe or irrelevant handling of user requests and expand the attack surface for prompt or workflow abuse.
The implementation description and all suggestion strings are written only in Chinese, while the manifest also includes an English trigger phrase. This creates a language-policy concern because users invoking the skill in English are not offered a language choice or told that responses will be Chinese-only.
No suspicious patterns detected.
