Security audit
Security checks for vulnerabilities and agentic risk
This skill is a narrow Markdown translation helper that reads a user-specified SKILL.md and writes a translated copy, with the main caution being possible overwrite of SKILL(1).md.
Before installing or using this skill, confirm you want Chinese output and check whether SKILL(1).md already exists in the target skill folder, since the instructions allow overwriting that file. There is no evidence of hidden code execution, credential access, network retrieval, or broad persistence.
The description states that the skill translates SKILL.md content into Chinese as a fixed behavior. This is a natural-language locale constraint without any indication that the user can choose another language or explicitly opt in, which matches the language/locale policy violation criteria.
The skill explicitly states it will create or overwrite SKILL(1).md in the target directory, but it does not require an explicit confirmation step before performing a destructive write. This can lead to unintended data loss if a file with that name already exists, especially because the path is user-supplied and the operation is automatic.
No suspicious patterns detected.
