Security audit
Security checks for vulnerabilities and agentic risk
This skill does what it says: bulk-searches public academic email addresses and writes them into a spreadsheet, with privacy and overwrite risks users should manage.
Before installing or using it, confirm you have a legitimate basis to collect these email addresses, provide only the intended spreadsheet and columns, and prefer writing results to a copy rather than overwriting the original workbook.
The trigger phrases include broad terms like '邮箱搜索', 'email搜索', and '搜邮箱', which can match common user requests beyond the narrow academic-email use case. This can cause the skill to activate unexpectedly and perform bulk personal-data collection or file operations in contexts where the user did not intend this specific workflow.
The skill is designed to perform bulk external searches for individuals' email addresses and write results back into the source spreadsheet, including overwrite-save behavior shown later in the file. Without an explicit warning and confirmation step, users may unknowingly trigger mass personal-data collection and irreversible modification of the original file, creating privacy, compliance, and integrity risks.
No suspicious patterns detected.
