Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward thesis-defense Q&A helper with no code execution, persistence, credential use, or hidden data movement.
Before installing, be aware that the skill is designed to analyze thesis text you provide and produce practice answers in the thesis's dominant language by default. Do not provide private research data or participant information unless you are comfortable sharing it with the agent environment.
The description states that questions and answers 'must use the same dominant language as the thesis unless the user requests another language.' This sets a default language policy based on document content rather than explicit user choice, which can violate language/locale policy because it forces a language unless the user overrides it.
The scope section says to 'Default to the same dominant language as the thesis' and gives automatic language switching rules for Chinese and English. Because this behavior is automatic unless the user specifies otherwise, it imposes a language choice without explicit opt-in.
The drafting workflow instructs the skill to 'use that language for all questions and answers' after detecting the thesis's dominant language. This is a natural-language policy issue because it requires a specific language output path without first obtaining affirmative user preference.
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
> Thank you for pointing that out. I have not read that article closely enough to evaluate it responsibly. I would be glad to read it after the defense and consider whether it should be incorporated into the literature review or discussion.
### If a Suggestion Is Valuable but Beyond the Scope
Response:
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
### Scope Boundary Template
> That is an important point, but it goes beyond the scope of the current thesis. This study focuses on ..., so it does not fully examine .... I can add this point to the section on future research and suggest that later studies investigate it through ....
## Revision Checklist
No suspicious patterns detected.