Security audit
Security checks for vulnerabilities and agentic risk
This skill is a documentation-only helper for designing user-requested recurring checklists and cron schedules, with no hidden code execution or data access found.
Install only if you want a Chinese-language helper for designing recurring checks. Review any generated cron schedule before enabling it, confirm the timezone, and give any resulting integrations only the minimum access needed, especially for email, calendar, billing, passwords, backups, and social accounts.
The entire skill file is written in Chinese, including headings, guidance, and examples, with no indication that users may choose another language or that the skill is intended only for a Chinese-speaking or region-specific audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
This markdown file describes recurring checks over multiple privacy- and security-sensitive domains, including email, calendars, social activity, billing, passwords, and backup status. Under SQP-2 for markdown files, the description should warn users that such behaviors may affect privacy or system integrity, but no such warning is provided anywhere in the document.
The skill describes a rough flow but does not define precise activation boundaries, prerequisites, or when it should decline to run. Without clear trigger and non-trigger rules, the agent may invoke this skill in ambiguous scheduling or reminder contexts, leading to incorrect task generation, user confusion, or unintended automation recommendations.
The trigger list contains broad, everyday phrases such as '定时巡检', '自动监控配置', and '周期性任务' that can overlap with ordinary user requests outside the intended skill scope. This raises the risk of unintended activation, causing the assistant to steer benign conversations into generating recurring monitoring or cron-style configurations the user did not explicitly request.
The document centers time calculations around Beijing time and presents conversion guidance as the default without requiring the user's locale or explicit timezone confirmation. In a skill that generates cron schedules, this can produce incorrect execution times, missed reminders, or actions running at unintended hours, especially for users in other regions.
Natural-language policy issues apply to all file types, including markdown. This document forces a specific language/locale for all instructions and examples, with no opt-in or justification that the skill is region-specific.
No suspicious patterns detected.
