Security audit
Security checks for vulnerabilities and agentic risk
This skill is a product-review writing workflow with disclosed web, screenshot, and optional Feishu document use, and I found no hidden execution, persistence, or data-stealing behavior.
Before installing, expect the skill to browse product websites, search public sources, inspect screenshots, and produce Chinese reports by default. Only ask it to create a Feishu document when you are comfortable sharing the report through that integration.
The instruction explicitly says to write the report in Chinese unless the user requests another language. This sets a forced default language without prior user opt-in, which is a natural-language locale policy concern under the stated rule.
These lines require writing in Chinese by default and specify output length in Chinese characters. That enforces a locale/language default rather than offering the user an explicit language choice first.
No suspicious patterns detected.
