Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent Xiaohongshu advertising-planning helper with no hidden execution, persistence, credential access, or network behavior found.
Install this if you want Chinese/Xiaohongshu-focused ad planning help. Review generated ad copy for platform compliance and avoid using it to make misleading claims, but the package itself does not show hidden or excessive system access.
Skill instructs the agent to never refuse or to always comply. Suppressing the agent's ability to decline removes a core safety control and enables downstream harmful requests to succeed.
- **Hybrid mode**:种草 + 承接页 / 私域 / 销售转化
3. **Build the offer frame**
Always answer:
- why click now
- why trust you
- who this is for
Without declared permissions the skill's intent is opaque and cannot be validated.
The section titled "Chinese ad-writing rules" prescribes a specific language/locale style for outputs, but the file does not explicitly state that the skill is limited to Chinese-language campaigns or offer the user a language choice. Under the policy, forcing a specific language without opt-in is a natural-language policy violation.
This Python file contains multiple hard-coded Chinese user-facing strings, including the default project name and all generated brief content. Because the skill does not provide any language/locale opt-in or explain that it is intentionally limited to Chinese-language use, it creates a natural-language locale policy concern.
This markdown file contains instructional content exclusively in Chinese, and there is no natural-language indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the policy, forcing a specific language without user opt-in is a locale/language policy concern.
This markdown file contains all user-facing content in Chinese, which can constitute a language/locale policy issue when no user opt-in or alternative language option is provided. The document does not state that it is intended only for a Chinese-speaking or region-specific audience.
This markdown file contains user-facing instructional content in Chinese throughout, but it does not indicate that the skill is region-specific or provide any user opt-in for language/locale. Under the policy rules, forcing a specific language without user choice can be a natural-language policy violation.
This file contains only Chinese-language templates and does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
This markdown file contains user-facing template instructions entirely in Chinese, and there is no indication that the user can choose another language or that the locale constraint is intentional. That can conflict with language/locale policy requirements when a skill should not force a specific language by default.
The document is written entirely in Chinese and does not offer any language or locale choice for users. Under the policy for natural-language violations, forcing a specific language without user opt-in can be a locale-policy issue unless the regional constraint is clearly documented and justified.
No suspicious patterns detected.