Security audit
Security checks for vulnerabilities and agentic risk
This is a documentation-only skill for operating the OpenClaw Workboard plugin, with disclosed local state changes and bounded worker dispatch behavior.
Install this only if you use OpenClaw Workboard and are comfortable with a Chinese-language guide. Treat create, dispatch, archive, delete, and bulk operations as real changes to your local Workboard/Gateway state, and confirm the target board or card before using write-capable commands.
The natural-language content of the skill is entirely in Chinese, including the invocation description and operating instructions, with no indication that users may choose another language or that the skill is intentionally region-specific. This can violate language/locale policy because it implicitly requires a specific language without user opt-in.
该 Markdown 文件列出了 workboard_attachment_delete、workboard_board_archive 和 workboard_board_delete 等会影响数据完整性的操作，但周围说明仅描述用途，没有任何用户警示、确认要求或风险提示。按照 Markdown 文件的 SQP-2 标准，涉及用户数据或系统完整性的行为应明确告知影响。
该参考文档全文以中文编写，并未说明这是仅限中文环境的区域性技能，也没有提供用户可选择其他语言或语言偏好的说明。按规则，强制单一语言而无用户选择属于自然语言层面的语言/区域策略问题。
The file content and heading are entirely in Chinese and explicitly state it is project guidance for Claude Code, but there is no indication that language selection is optional or limited to a China-specific deployment. This can violate language/locale policy when a skill effectively forces one language without user opt-in.
No suspicious patterns detected.
