Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese study-helper prompt skill that does not install code or access data beyond what the user provides.
Install this if you want a Chinese-language study assistant for notes, memorization, and review plans. Use explicit prompts if you want to avoid accidental activation, and avoid pasting sensitive private notes unless you are comfortable sharing them with the agent handling the request.
The trigger phrases are common conversational terms such as '整理笔记', '帮我记', and '复习计划', which can plausibly appear in ordinary user requests and unintentionally activate the skill. This creates a prompt-routing and unintended invocation risk rather than direct code execution, but it can still cause the wrong skill to process user data or override expected behavior.
The skill metadata and instructions are entirely Chinese-centric and do not indicate any fallback or language negotiation, which can force interactions into a language the user did not choose. This is primarily a safety/usability issue: language mismatch can cause misunderstanding of outputs, user intent, or disclosures, especially if the platform serves multilingual users.
The trigger phrase 帮我记 is very broad and resembles ordinary conversational text, so it can cause accidental invocation of the skill in unrelated contexts. This increases prompt-routing ambiguity and may lead the agent to apply this skill when the user did not intend memory-assistance behavior, reducing reliability and potentially interfering with safer or more appropriate skills.
The entire skill, including the title, trigger phrases, prompt template, and example dialogue, is written exclusively in Chinese and does not indicate that users may choose another language. Under the policy, language-specific behavior is a violation unless the skill provides opt-in or clearly documents a justified region- or locale-specific restriction.
Natural-language policy checks apply to all file types. The file presents the title, trigger phrases, prompt template, and example dialogue only in Chinese, which can amount to a language constraint without user opt-in or an explicit statement that the skill is intended only for Chinese-speaking users.
The skill content, trigger phrases, and prompt template are all presented in Chinese, and the file does not indicate that language selection is optional or that the skill is intentionally limited to a Chinese-language context. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.
The activation phrases 整理笔记 and especially 帮我整理笔记 are natural-language requests that could plausibly appear in ordinary conversation. The file does not specify when the skill should not activate or provide narrower contextual constraints, which increases the risk of unintended invocation.
No suspicious patterns detected.
