Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed vocabulary coach that stores review progress in local Markdown files and does not show deceptive, destructive, or privilege-seeking behavior.
Install this if you want a Chinese-language English vocabulary coach that keeps progress files in the current project. Be aware that entering a single English word can add it to local memory files, so avoid using it from repositories or synced folders where you do not want vocabulary history written.
The instructions require output in a fixed language format: 'Chinese explanations + English examples', and later sections continue using Chinese-only labels and reminders. This forces a specific language/locale behavior without presenting it as an option or obtaining user preference, which matches the language-policy violation criteria.
The skill is explicitly designed to create and update files under memory/ in the current working directory, but it provides no user-facing notice or consent step before persisting local data. This can lead to unexpected modification of the user's workspace, accidental storage of sensitive inputs, and confusion in environments where the working directory is shared, synced, or under version control.
No suspicious patterns detected.
