Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent Chinese patent and software copyright drafting assistant, with no evidence of hidden execution, persistence, credential use, or data exfiltration.
Before using it, avoid sharing portal passwords, unnecessary identity document images, secrets, API keys, or unrelated proprietary code. Provide only the technical and filing details needed for the draft, and redact sensitive identifiers where possible.
The description lists broad activation terms such as “专利”, “发明点”, and “权利要求”, which can appear in ordinary discussion without the user intending to invoke this specific skill. The file does not provide exclusion conditions or negative examples to clarify when the skill should not activate.
The skill explicitly solicits sensitive identity and application materials, including personal/enterprise identification documents, account-related information, screenshots, and detailed technical materials, but provides no privacy notice, minimization guidance, retention limits, or safer handling instructions. In this context, the skill is designed to collect exactly the kinds of information that can enable privacy harm, credential exposure, and IP leakage if mishandled, making the omission materially risky.
The entire template prescribes Chinese headings, examples, and drafting conventions, which effectively requires a specific language/locale for use. Under the policy criteria, a skill should not force a language without offering user choice or clearly documenting a justified region-specific constraint.
The file consistently prescribes Chinese-language patent and copyright application assistance and presents the skill as a Chinese-only workflow, but it does not explicitly offer the user a language option. Although the content is China-specific, the policy concern is that the language/locale constraint is not clearly framed as an opt-in or documented limitation.
The entire skill file is written in Chinese and provides no indication that users may choose another language or that the language restriction is an explicit, documented requirement of the skill. Under the policy criteria, forcing a specific language without user opt-in is a natural-language policy concern.
No suspicious patterns detected.
