Security audit
Security checks for vulnerabilities and agentic risk
This is a documentation-only architecture skill with high-impact implementation guidance, but its database, external API, file, and authorization guidance is explicit and purpose-aligned.
Before installing, confirm you want a Traditional Chinese architecture skill that guides agents on business workflow writes, transactions, authorization checks, and external side effects. Use extra caution in Payload CMS because overrideAccess relies on the required authorization Step being present and tested, and avoid using the claimed Flutter support until the missing Flutter reference is provided.
Referenced artifact was not completely inspected
S 為基底（存在 payload.config.ts、collections/、custom endpoints、collection hooks），額外載入 references/payload-cms.md；專案若部署在 Cloudflare Workers（存在 wrangler.toml 或 wrangler.
Referenced artifact was not completely inspected
S 為基底（存在 payload.config.ts、collections/、custom endpoints、collection hooks），額外載入 references/payload-cms.md；專案若部署在 Cloudflare Workers（存在 wrangler.toml 或 wrangler.
Referenced artifact was not completely inspected
S 為基底（存在 payload.config.ts、collections/、custom endpoints、collection hooks），額外載入 references/payload-cms.md；專案若部署在 Cloudflare Workers（存在 wrangler.toml 或 wrangler.
Referenced artifact was not completely inspected
S 為基底（存在 payload.config.ts、collections/、custom endpoints、collection hooks），額外載入 references/payload-cms.md；專案若部署在 Cloudflare Workers（存在 wrangler.toml 或 wrangler.
Referenced artifact was not completely inspected
S 為基底（存在 payload.config.ts、collections/、custom endpoints、collection hooks），額外載入 references/payload-cms.md；專案若部署在 Cloudflare Workers（存在 wrangler.toml 或 wrangler.
Referenced artifact was not completely inspected
S 為基底（存在 payload.config.ts、collections/、custom endpoints、collection hooks），額外載入 references/payload-cms.md；專案若部署在 Cloudflare Workers（存在 wrangler.toml 或 wrangler.
Referenced artifact was not completely inspected
S 為基底（存在 payload.config.ts、collections/、custom endpoints、collection hooks），額外載入 references/payload-cms.md；專案若部署在 Cloudflare Workers（存在 wrangler.toml 或 wrangler.
Referenced artifact was not completely inspected
| 有 `package.json` / `tsconfig.json`，或要改的檔案是 `.ts` | TypeScript / Node.js | `references/typescript.md` |
Referenced artifact was not completely inspected
| 有 `package.json` / `tsconfig.json`，或要改的檔案是 `.ts` | TypeScript / Node.js | `references/typescript.md` |
Referenced artifact was not completely inspected
| 有 `package.json` / `tsconfig.json`，或要改的檔案是 `.ts` | TypeScript / Node.js | `references/typescript.md` |
Referenced artifact was not completely inspected
| 有 `package.json` / `tsconfig.json`，或要改的檔案是 `.ts` | TypeScript / Node.js | `references/typescript.md` |
Referenced artifact was not completely inspected
| 有 `package.json` / `tsconfig.json`，或要改的檔案是 `.ts` | TypeScript / Node.js | `references/typescript.md` |
Referenced artifact was not completely inspected
| 有 `package.json` / `tsconfig.json`，或要改的檔案是 `.ts` | TypeScript / Node.js | `references/typescript.md` |
Referenced artifact was not completely inspected
| 有 `package.json` / `tsconfig.json`，或要改的檔案是 `.ts` | TypeScript / Node.js | `references/typescript.md` |
Referenced artifact was not completely inspected
| 有 `package.json` / `tsconfig.json`，或要改的檔案是 `.ts` | TypeScript / Node.js | `references/typescript.md` |
The manifest description is entirely written in Traditional Chinese and the document consistently instructs behavior in that locale, but it does not indicate that language choice is optional or that the skill is region-specific. Under the language/locale policy, forcing a specific language without user opt-in is a natural-language policy concern.
The file title and the entire instructional content are presented in Traditional Chinese, but there is no natural-language statement offering a language choice or documenting that this skill is intentionally limited to a Chinese-speaking audience. Under the stated policy, forcing a specific language without user opt-in is a locale/language policy violation.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
This markdown file presents all instructional content in Traditional Chinese, including headings, warnings, and code commentary, but does not indicate that the user can choose another language. That can violate a language/locale policy when skills are expected to avoid forcing a specific language without user opt-in.
This markdown file presents all instructions and examples in Traditional Chinese and explicitly directs readers to use the Python reference, but it does not offer any language or locale choice. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is justified, which is not stated here.
No suspicious patterns detected.