Security audit
Security checks for vulnerabilities and agentic risk
This skill only changes how copyable Markdown is formatted and does not request sensitive access, run code, or persist anything.
Installers should expect this skill to alter raw Markdown formatting when users ask for copyable Markdown, including wrapping output in triple tildes and adding unusual spaces in Markdown links. It is low risk from a security perspective, but users who need standard Markdown link syntax may find the formatting policy inconvenient.
The trigger condition uses open-ended language like 'or similar requests,' which can cause the skill to activate in unintended contexts. Because this skill imposes formatting rules with claimed higher priority than other preferences, overbroad activation can incorrectly override normal response behavior and produce malformed or policy-conflicting output.
The description explicitly includes a Chinese trigger phrase ('markdown 源码') as part of the activation policy, but does not state that language matching is optional or user-selected. This can be interpreted as a locale-specific policy choice without documented opt-in or justification.
No suspicious patterns detected.
