Security audit
Security checks for vulnerabilities and agentic risk
This is a markdown-only Chinese education-business operations skill, with no code execution or persistence, but users should add privacy safeguards before using its student photo-sharing templates.
Before installing, treat this as business-advice content rather than an automated operator. If used with children's information, revise the templates to require parent or guardian consent, share only through approved private channels, avoid faces/names where unnecessary, and remove identifying details from screenshots or photos.
The description is written to imply Chinese-language operation without checking the user's language preference, which can cause the skill to respond in a language the user did not request. This is primarily a safety and usability issue because it may reduce comprehension, produce mistaken actions, or exclude users who expected another language.
The trigger terms are very broad and cover common education-business topics, which can cause the skill to activate in conversations where the user did not intend to invoke this specialized workflow. Unintended invocation can override more relevant system behavior, steer the conversation into business-operational advice, and increase the chance of inappropriate data collection or context confusion.
The template explicitly instructs staff to send a child's work screenshot or photo but provides no requirement to obtain parental consent, minimize identifying information, or restrict sharing scope. In an education context involving minors, this creates a real privacy risk because images can expose personal data, faces, names, school materials, or metadata and may be shared beyond the intended audience.
The template suggests attaching a class group photo or student photo without any privacy, consent, or audience-limitation guidance. Because this skill is for training institutions serving children and families, normalizing photo sharing without safeguards can lead to unauthorized disclosure of minors' identities and broader circulation of their images.
No suspicious patterns detected.
