Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent Chinese-language daily digest/PDF helper with disclosed, user-directed scheduling guidance and no evidence of hidden execution or data misuse.
Install this if you want a Chinese-language editorial daily brief workflow that can produce A4 PDFs. Review the scheduling steps before enabling recurring runs, and specify your preferred language, output folder, timezone, and whether drafts need preview before final delivery.
The trigger description includes many broad, everyday phrases such as 'daily brief', 'newsletter-style digest', and generic topic groupings, which can cause the skill to activate in contexts where the user did not explicitly want this specific skill. Over-broad activation increases the chance of unintended tool routing, surprising behavior, and inappropriate processing of user requests.
The '何时使用' section defines activation conditions using broad categories like any daily push, recap, A4 PDF, custom sections, grouped topics, or branded summaries, without strong limiting conditions. This makes the skill more likely to activate for normal summarization, organization, or formatting requests, which can lead to misrouting and unintended execution of PDF-generation or scheduling behavior.
The file recommends specific Chinese-only naming patterns such as '今天主线' and transforms generic English topic inputs into Chinese editorial labels. This can amount to a language policy violation because it steers output into a specific language without explicit user opt-in or a documented region-specific justification.
This markdown file includes HTML templates that hard-code lang="zh-CN", which imposes a specific language/locale in the generated output. The file does not state that this locale is optional, user-selected, or limited to a justified region-specific use case.
The second HTML template sets lang="zh-CN", which is a natural-language locale constraint. Because the surrounding instructions do not offer a language choice or explain that the skill is intentionally region-specific, this can violate language/locale policy expectations.
The third template also fixes the document language to zh-CN, which can force a specific locale on users. The file does not provide an alternative locale path or explicit opt-in language selection.
The instruction says to use this file when the user explicitly wants 私人编辑部 to end as a PDF, which hard-codes a Chinese-language title/context without stating that the user can choose another language or locale. Under the policy, language or locale constraints should be opt-in or clearly justified.
The file includes invocation examples only in Chinese, which can imply a language-specific interaction pattern for the skill. Because the document does not state that the skill is China/Chinese-specific or offer alternate language usage, this may conflict with a language/locale policy requiring user choice or explicit justification.
No suspicious patterns detected.
