Security audit
Security checks for vulnerabilities and agentic risk
This is a read-only QA bug lifecycle guide; the main caution is an optional unpinned command to install a broader skill set.
Install only if you want Chinese-oriented QA defect lifecycle guidance. Do not paste real customer, identity, payment, or production data into bug examples unless it is masked. Treat the optional `npx skills add Kokxi/qa-test-skills` command as a separate install decision and verify the source or pin a trusted version before running it.
The top-level description advertises very broad usage scenarios covering general defect management and team process normalization, without clear boundaries for when the skill should or should not engage. This makes accidental invocation more likely and expands the attack surface for prompt/instruction interference from unrelated conversations.
The trigger text includes broad phrases like needing to manage defects or analyze trends, which can cause the skill to activate in loosely related conversations. Over-broad activation increases the chance of context hijacking, unnecessary instruction injection, or the model following workflow constraints when the user did not intend to invoke this skill.
The skill recommends executing npx skills add Kokxi/qa-test-skills without pinning an exact package/version or commit, which creates a supply-chain risk. If the referenced package or dependency tree changes or is compromised, users could fetch and run unexpected code during installation.
The entire reference file is written in Chinese and provides no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking context. Under the policy, a language-specific constraint without opt-in or documented justification is a natural-language policy violation.
The skill's activation description and when-to-use metadata are primarily written around Chinese-language user phrases, while also mixing in English. There is no explicit statement that the skill supports multiple languages or adapts to the user's preferred locale, which can violate a language/locale choice policy.
