Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language video cover design helper with no evident hidden access, persistence, or data exfiltration behavior.
Reasonable to install for Chinese-language short-video cover ideation. Be aware that the bundled Python helper may fail until the undefined platform_config bug is fixed, and it does not currently offer non-Chinese output controls.
This file’s natural-language descriptions and generated output are exclusively in Chinese, and there is no indication that users can opt into another language or that the skill is intentionally limited to a Chinese-speaking context. That can violate language/locale policy when a skill effectively forces a specific language without user choice.
The templates and formatted output shown to users are all hard-coded in Chinese, and the code does not provide any mechanism to select another language. This means the skill enforces a single language in user-facing behavior rather than offering a documented choice or justified region-specific constraint.
L229-L230 表明该函数用于“生成构图建议”，并且其签名显示会基于 platform 生成结果，但 L241 实际读取的是未在函数内定义、也未作为参数传入的 platform_config。也就是说，代码表达的意图是按平台生成构图建议，但实现并未按所声明的输入工作，反而会在运行时出错。
No suspicious patterns detected.
