Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Chinese trending-news briefing helper that uses web lookups as expected and does not request local access, persistence, or code execution.
Install this if you want Chinese-language, live hot-topic briefings from public web sources. Be aware it may browse/search when you ask broad current-events questions, and you may need to explicitly request another language if you do not want Chinese output.
The skill is written entirely as Chinese-first and implicitly steers operation and output into Chinese without documenting language selection behavior. This can override user language preferences or produce inaccessible output, which is a safety and usability concern because it may cause miscommunication in high-context news analysis tasks.
The skill description is broadly framed around common requests like '今天有什么大事' and '热点解读', which can cause the agent to invoke the skill for ordinary conversational queries without strong routing boundaries. This increases the chance of unnecessary web access, over-collection of external content, and unintended substitution of the base assistant's safer default behavior.
The model-facing trigger list and workflow are ambiguous and permissive, telling the model to use the skill for loosely defined requests about major events or topic discussion. In practice, this can lead to over-triggering, causing the agent to browse external sources and generate authoritative-seeming summaries when the user may not have requested live retrieval or when simpler in-model responses would suffice.
No suspicious patterns detected.
