Security audit
Security checks for vulnerabilities and agentic risk
This is a small Git review helper that asks the agent to analyze remote diffs and optionally help with merges; its network Git use is expected for that purpose.
Install this if you want a Chinese-language helper for reviewing incoming Git changes. Before using it in sensitive repositories, remember that git fetch contacts the configured remote and may use your normal Git credentials; approve any pull or merge only after reviewing the summarized changes.
The manifest description and operating instructions are entirely in Chinese and present the skill behavior as Chinese-first, but do not offer the user a choice of language or state that the skill is intentionally limited to a Chinese-speaking context. Per the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The skill explicitly instructs the agent to run git fetch, which performs remote network access and may contact a configured Git remote without first informing or obtaining consent from the user. In an agent setting, hidden network activity can surprise users, leak repository metadata to external infrastructure, or violate expectations in restricted environments, even if the command is common and not inherently malicious.
No suspicious patterns detected.
