Security audit
Security checks for vulnerabilities and agentic risk
The skill is mostly QA leadership guidance, but it recommends an unpinned external install that could change a user's installed skill set.
Review the external `Kokxi/qa-test-skills` package before running the recommended install command, and prefer a pinned or verified version. The included skill content itself is guidance-only and low privilege, but the broader installation could change future agent behavior.
The activation criteria are very broad, covering generic terms like team management, performance evaluation, hiring, interviews, and goals. Overly broad triggers can cause the skill to activate in unrelated contexts, increasing the chance that users receive unintended instructions or that the skill overrides a more appropriate, narrower skill.
The primary skill description and operating guidance are written as prescriptive Chinese-language instructions, while the file does not state that language is optional or region-specific. This can violate language or locale policy when users have not opted into Chinese output.
The skill recommends installing an external package via npx skills add Kokxi/qa-test-skills without pinning a specific version or commit. This creates a supply-chain risk: a later package update, account compromise, or repo change could cause users to fetch and run unexpected code or content under the trusted skill workflow.
The file presents the skill guidance entirely in Chinese and does not state that the language is optional, user-selected, or limited to a justified region-specific context. Under the policy rule for natural-language constraints, this can be treated as a locale/language restriction without explicit opt-in.
