Security audit
Security checks for vulnerabilities and agentic risk
This skill provides a disclosed workflow for collecting public X posts, summarizing them, and posting only after confirmation.
Before installing, be aware that this skill is meant to operate through browser automation on X and can help publish posts. Review the target account, final text, and any attached image carefully before approving publication, and treat its language defaults as workflow preferences rather than security concerns.
The description says to 'produce Chinese working notes' as part of the workflow, which imposes a specific language requirement. This is a natural-language policy issue because the file does not offer the user a language choice or present the Chinese notes as optional.
The heading explicitly specifies "English, neutral," which is a natural-language locale constraint. Because the file does not offer an opt-in choice of language or explain a region-specific need, it appears to force English output by default, which matches the policy-violation category for language/locale constraints.
No suspicious patterns detected.
