Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language job interview and resume coaching skill with no executable code, persistence, or hidden data transfer, though users should avoid sharing unnecessary personal details.
Install only if you want Chinese-language job search coaching. When using resume or interview templates, share only the personal information needed for the task, redact contact details during drafting when possible, and treat the listed custom service email as an optional external contact outside the skill.
The invocation description is broad enough to match ordinary career-related conversation, which can cause the skill to activate in situations where the user did not clearly intend to use a specialized job-search workflow. Over-broad triggering increases the chance of unnecessary collection or processing of personal career information and can interfere with normal assistant behavior.
The resume template explicitly requests personal information such as name, phone number, email, and profile links, but provides no privacy notice, minimization guidance, or warning against sharing unnecessary sensitive data. In a job-assistance context, users are likely to paste real PII, making inadvertent exposure or oversharing more likely.
The phrase telling users to say they need custom service is vague and can redirect users into an off-platform service flow without clear boundaries, consent language, or safety checks. This creates a pathway for social engineering, privacy leakage, or unreviewed commercial engagement outside the normal skill scope.
The skill manifest and instructional content are fully in Chinese, with no indication that the user can choose another language. This can violate language/locale policy when a skill effectively forces a language without explicit user opt-in or justification for a region-specific scope.
