Security audit
Security checks for vulnerabilities and agentic risk
The skill is mostly a coherent expert-skill generator, but it defaults to writing a new skill into the user's skills directory without clear confirmation or overwrite safeguards.
Review before installing because this skill may cause an agent to create a persistent new skill file in your skills directory by default. Use it only when you want that local change, and ask the agent to preview the SKILL.md, confirm the destination path, and avoid overwriting existing files unless you explicitly approve.
The manifest description is primarily written in Chinese and presents trigger phrases and usage guidance centered on Chinese-language interaction, without stating that language is optional or user-selectable. Under the policy rule, forcing a specific language or locale without opt-in is a natural-language policy violation.
The skill directs the agent to write a complete SKILL.md into the user's skills directory by default, but it does not require explicit confirmation before modifying local files. In environments where Write/Edit are available, this can lead to unexpected filesystem changes, accidental overwrites, or persistence of prompt content the user did not clearly approve.
This markdown file is entirely framed in Chinese and presents the guidance as the default style for the skill-pattern library, with no indication that users may choose another language or locale. Under the policy for natural-language constraints, forcing a specific language without user opt-in is a reportable locale-policy issue.
No suspicious patterns detected.
