Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent Chinese naming and birth-chart reference skill that runs a local calculator script and does not show hidden network, persistence, or data-exfiltration behavior.
Install only if you are comfortable providing family names and birth dates for an in-session cultural naming analysis. Treat the outputs as cultural reference, not deterministic life or legal advice; narrower trigger wording would reduce accidental activation.
The entire skill description, installation instructions, usage example, and disclosures are written only in Chinese, which effectively imposes a specific language on users. The policy allows locale constraints only when justified or when users are offered a language/locale choice, neither of which appears here.
The skill description lists very broad trigger terms such as “起名”, “改名”, “八字”, and “小孩名字”, which can appear in ordinary conversation and cause the skill to activate when the user did not intend to request this specialty workflow. Unintended invocation can expose users to unnecessary collection prompts for sensitive personal data such as names and birth dates, and can misroute conversations away from the correct skill or baseline assistant behavior.
