Security audit
Security checks for vulnerabilities and agentic risk
This is a static foreign-trade template and guidance skill with no code execution, persistence, credential access, or hidden data handling.
Before installing, treat the contract, customs, logistics, and dispute content as general drafting support only. Users should verify legal, customs, tax, and shipment decisions with qualified professionals or authoritative sources before relying on them in real transactions.
The skill description is very broad, covering many common foreign-trade tasks such as outreach, quotations, contracts, logistics, and disputes. Because activation scope is not tightly bounded, an agent may invoke this skill for a wide range of routine business requests, increasing the chance of unintended triggering, response hijacking, or bypass of more appropriate specialized safeguards.
The workflow says the skill should act 'when foreign trade practitioners need help,' which is ambiguous and effectively applies to almost any trade-related request. This broad trigger can cause over-activation, making the system more likely to route unrelated or higher-risk requests into this skill without sufficient contextual checks.
