Security audit
Security checks for vulnerabilities and agentic risk
This is a China-focused legal-aid skill made of markdown guidance and templates, with expected legal/privacy cautions but no hidden execution, persistence, or exfiltration behavior found.
Use this skill as PRC legal self-help, not a substitute for a licensed lawyer. Verify current law, deadlines, and local procedures with official sources, redact unnecessary identifiers while drafting, and submit full ID numbers or evidence files only through verified official channels or to trusted counsel.
The README presents the skill name bilingually but all substantive usage and behavior description is written only in Chinese. Under the language/locale policy, this is a natural-language constraint that effectively forces a specific language without documenting user choice or a justified region-specific limitation.
The manifest description and the operational instructions are entirely in Chinese and present the workflow as the default behavior, with no indication that users may choose another language. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern unless a locale limitation is explicitly documented and justified.
The skill activates on very broad dispute-related keywords such as ‘投诉’, ‘起诉’, and ‘证据’ without any narrowing conditions, which can cause it to engage in sensitive legal-guidance workflows for ambiguous or unrelated conversations. In this context, over-triggering is risky because the skill then solicits detailed personal/legal facts and may guide users into complaint, reporting, or litigation paths without first confirming jurisdiction, suitability, or consent.
The skill directs collection and analysis of highly sensitive personal, medical, employment, police, and litigation information and also instructs querying external legal resources, but it does not warn users about privacy implications or obtain consent before processing or external lookup. This increases the risk of unnecessary exposure of personal data, especially in legally sensitive matters where identity, health, financial, or evidentiary records may be involved.
The entire skill is written as Chinese-only guidance and templates, with no indication that language choice is optional or that the skill is restricted to users who specifically requested Chinese output. Under the policy rule for language or locale constraints, this is a natural-language locale enforcement issue unless the file explicitly offers opt-in or documents a justified regional limitation.
The example content is entirely in Chinese and assumes China-specific legal and complaint channels without any user opt-in for language or jurisdiction. In an agent skill, this can cause the assistant to respond in an unexpected language/locale or apply the wrong regional procedures, which may mislead users seeking legal help outside the intended context.
该段鼓励用户提交购物发票、合同、聊天记录、照片、视频、支付凭证等证据，但没有提示这些材料可能包含本人或第三方的住址、手机号、面部、账号、订单号等敏感信息。维权材料通常高度真实且可识别，一旦被误投到错误平台、过度上传或未经脱敏共享，容易造成隐私泄露、二次伤害和关联画像风险。
该段内容明确引导用户在网上信访流程中进行实名注册并提交姓名、身份证号、手机号等敏感个人信息，但未提醒用户仅在官方渠道提交、核验网址真伪、避免过度填写，或说明隐私风险。对于法律维权类技能而言，用户往往处于高压力情境，更可能无保留上传敏感信息，增加隐私泄露、身份冒用和钓鱼仿冒利用的风险。
This markdown file is natural-language content, so locale policy checks apply. The document presents all instructions and guidance exclusively in Chinese and does not indicate that the skill is China-specific only, nor does it offer the user an opt-in or alternative language choice.
The entire skill is written only in Chinese and presents no indication that users may request another language or locale. Under the stated policy, forcing a specific language without opt-in is a natural-language policy violation unless the locale restriction is explicitly documented and justified.
The document is entirely written in Chinese and scoped to Chinese legal sources, but it does not state that the skill is China-specific or offer any language/locale choice. Under the policy, forcing a specific language or locale without opt-in can be a natural-language policy violation.
The title and entire skill content are presented only in Chinese, and there is no natural-language indication that users may choose another language or that the skill is intentionally restricted to Chinese-speaking users. Under the language/locale policy, forcing a specific language without user opt-in is a policy concern.
The medical-accident section gives procedural and compensation guidance that users may rely on in urgent, high-stakes situations, but it does not warn that rules, timelines, responsible agencies, and practical handling can vary by region and may change over time. In a legal-aid skill, omission of this disclaimer can mislead users into taking incorrect procedural steps, missing deadlines, or relying on outdated standards, increasing the risk of harm.
This markdown file is entirely written in Chinese and does not indicate that the user can choose another language or that the skill is limited to a China-specific audience. Under the policy criteria, forcing a specific language without user opt-in can be a natural-language policy violation.
The document instructs users to input case descriptions and search by parties' names and other case-related details on public judicial platforms, but it does not warn against disclosing unnecessary personal information or sensitive facts. In a legal-aid skill, users are especially likely to provide highly sensitive dispute details, so this omission can lead to privacy leakage, over-sharing of PII, or unnecessary exposure of confidential case information to third-party systems.
The templates repeatedly instruct users to include highly sensitive personal data such as身份证号码、住址、联系电话、出生日期 and medical or dispute details, but provide no privacy warning, minimization guidance, or redaction advice. In a legal-aid skill, users are especially likely to paste real-world data into prompts or generated documents, increasing the risk of unnecessary disclosure to the model, logs, third parties, or wrong recipients.
This file presents all guidance in Chinese and does not state that the user can request another language or that the skill is intentionally limited to Chinese-language users. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation.
This markdown file consists solely of Chinese-language instructions and example content, with no indication that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the language/locale policy rule, forcing a specific language without user opt-in can be a natural-language policy violation.
This markdown file presents all instructional and reference content exclusively in Chinese, and it does not state that the skill is region-specific or that users may choose another language. Under the policy rule for language or locale constraints, forcing a specific language without user opt-in can be a natural-language policy violation.
The content forces a single language/locale presentation throughout the skill with no opt-in or alternative language choice. Under SQP-3, this can be a natural-language policy concern when a skill mandates one language without giving the user a choice or documenting the locale restriction.
This markdown file is entirely written in Chinese and provides no indication that users may request another language or locale. The policy for natural-language violations flags skills that force a specific language without user opt-in, and this file contains no opt-in or documented regional-language constraint.
This markdown file contains only Chinese-language content and does not indicate that the skill is intended exclusively for Chinese-speaking users or provide an opt-in language choice. Under the policy rule, forcing a specific language without user choice can be a natural-language policy violation unless the locale constraint is clearly documented and justified.
The title and all substantive content are presented exclusively in Chinese, and the file does not indicate that the skill is China-specific or that users may choose another language. Under the policy rule for language/locale, this is a natural-language constraint that lacks opt-in or explicit justification in the file itself.
No suspicious patterns detected.
