Security audit
Security checks for vulnerabilities and agentic risk
This is a scoped writing-planning skill that reads project story documents and writes one related sync report, with no hidden code or external access.
Before installing, confirm that this Chinese-language planning workflow fits your project and that writing CLАW_WORKSPACE/03-世界/world-character-sync.md is acceptable, especially if an existing report at that path should be preserved.
The manifest description is written as a Chinese-only trigger and the workflow/output paths and headings indicate the skill operates in Chinese by default, with no opt-in or language choice. The policy requires flagging language or locale constraints when a skill forces a specific language without user choice or documented justification.
The skill instructs the agent to write world-character-sync.md into CLAW_WORKSPACE/03-世界/ without requiring an explicit user confirmation, dry-run mode, or safety notice about modifying workspace contents. While the write target is scoped to a project workspace and appears aligned with the skill’s purpose, silent file creation/modification can still overwrite prior work or cause unintended state changes when the skill is invoked automatically.
No suspicious patterns detected.
