Security audit
Security checks for vulnerabilities and agentic risk
This skill transparently helps capture and refine ideas into Markdown documents, with no evidence of hidden execution, credential access, or unrelated behavior.
Install this if you want an assistant to automatically capture and maintain idea notes in your repository. Be aware that high-confidence idea-like messages may create or update Markdown files, so review changed files if you prefer strict manual control over documentation updates.
The invocation text says "Use $i-have-an-idea to capture my idea, develop it with me," which describes a very broad class of ordinary brainstorming requests rather than a narrowly bounded trigger condition. Because implicit invocation is enabled, this ambiguity increases the risk that everyday ideation conversations could trigger the skill unintentionally.
The template includes Chinese-only placeholders and instructional text such as "<简洁标题>" and multiple Chinese field descriptions, which effectively steers users toward a specific language. Because the file does not offer language/locale opt-in or explain that the template is intentionally region- or language-specific, this is a natural-language policy concern.
The short description is written in Chinese, but the file does not indicate that the skill is region-specific or that users can choose their preferred language. This may conflict with language/locale policy expectations when the surrounding metadata is otherwise not explicitly scoped to Chinese-speaking users.
