Security audit
Security checks for vulnerabilities and agentic risk
This is a broad programming-language guidance skill with no executable code, hidden persistence, credential handling, or network behavior.
Before installing, understand that this skill is intentionally broad and opinionated: it may shape many coding answers and may suggest project files, tests, linters, or dependency choices. Review generated code and dependency additions as you normally would, especially in existing projects with their own standards.
The trigger conditions are extremely broad and would activate for a large share of normal coding, debugging, review, migration, and testing requests. That increases the chance of unintended invocation, causing this skill to override more specific or safer skills and expand its influence beyond clear user intent.
Most of the document is in English, but the final section switches to Chinese for headings and descriptive text without stating that the user prefers Chinese or that multilingual output is optional. This imposes a locale/language change in the skill content rather than explicitly offering the user a choice.
