Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese meeting-minutes formatting skill with no code execution, persistence, network access, or hidden data handling.
Installers should treat this as a transcript-formatting aid and avoid pasting secrets, regulated personal data, or confidential business details unless they are allowed to share that content with the agent. Expect Chinese-formatted output unless the skill is revised to follow the user's preferred language.
The manifest and instructions are entirely specified in Chinese and require fixed Chinese output structures such as '严格按照以下结构输出', without indicating that the user may choose another language. This creates a language/locale policy issue because the skill appears to force a specific language without explicit opt-in or documented regional justification.
The skill is designed to process meeting transcripts, which commonly contain sensitive business information and personal data, yet it provides no warning or handling guidance for confidential content. This increases the chance that users will paste regulated, proprietary, or personally identifiable information into the tool without understanding the privacy implications.
No suspicious patterns detected.
