Security audit
Security checks for vulnerabilities and agentic risk
This is a read-only Markdown skill for QA test-effort estimation, with no artifact-backed evidence of hidden execution, persistence, exfiltration, or destructive behavior.
Before installing, treat the npx command as a separate trust decision and verify the referenced package/source. The skill itself is suitable for QA estimation, but users should avoid pasting confidential release or staffing data unless their agent environment and tool permissions are appropriate.
The description lists broad activation terms such as '排期', '资源规划', '工期', and '多久测完', which can appear in ordinary workplace conversations beyond the narrow skill intent. The file does not provide exclusion conditions or negative examples to clarify when the skill should not activate.
The primary description and invocation guidance are written as mandatory Chinese-language instructions, while the file does not state that the skill is region-specific or provide an opt-in choice for language. This creates a locale/language policy concern because the skill appears to impose a language without user selection.
The manifest-style 'when-to-use' string mixes exact phrases with broad intent statements like '需要估算测试工作量' and '项目计划阶段需要测试工时评估时', but does not specify the minimum context required for activation. Without explicit constraints, the skill may match loosely related planning conversations.
The skill instructs users to install a package via npx skills add Kokxi/qa-test-skills without pinning an exact version or immutable source. That creates a supply-chain risk: a later package update, account compromise, or namespace takeover could cause different code to run than the author intended.
The document claims the skill only writes assessment files in workspace/ and does not persist, exfiltrate, or reuse data, but the skill definition contains no enforceable mechanism for those guarantees. Such misleading security assurances can cause users to trust the skill with sensitive planning data under false assumptions about data handling boundaries.
This markdown file presents all user-facing instructional content in a single language, which can violate a language/locale policy when no user opt-in or alternative is provided. The document does not state that it is intentionally region-specific or limited to Chinese-speaking users.
