Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese-language budgeting helper that stores expense records locally and does not show hidden execution, network access, or privilege-seeking behavior.
Install only if you are comfortable keeping personal spending records in local Markdown files under ~/Documents/daily-budget. Treat the privacy wording as a documentation claim rather than a technical guarantee, and review exported CSVs before sharing them.
The skill name and full user-facing description are written only in Chinese and present the assistant as a Chinese-language budgeting helper, with no indication that users may choose another language. Under the policy, imposing a specific language without opt-in is a natural-language policy violation unless the locale constraint is clearly documented and justified.
This file presents all user-facing content exclusively in Chinese and does not mention that the language is optional or intended for a Chinese-only audience. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation.
The skill manifest describes a budgeting assistant, while this file is a social-media marketing document making a concrete product claim: '数据全在本地，不怕泄露'. Because there is no implementation here to substantiate local-only storage, the documented behavior in this skill artifact overclaims privacy characteristics not evidenced by code.
No suspicious patterns detected.
