Security audit
Security checks for vulnerabilities and agentic risk
This is a markdown-only Chinese ecommerce intake skill that guides users to format product descriptions, with no executable code or hidden access.
Install this if you want a Chinese-language product-intake helper for strict ai_product_intro formatting. Be aware it is tailored to Chinese labels and ecommerce compliance phrasing, and review generated claims before copying them into a live product platform.
The skill instructions and examples are entirely written in Chinese and direct the agent to use specific Chinese output phrases, such as the final prompt to the user. There is no indication that the user may choose another language or that the restriction is required for a region-specific compliance context, which makes this a natural-language locale policy concern.
This markdown content appears to require Chinese comprehension throughout, including headings, instructions, and examples. Under the language/locale policy, forcing a specific language without offering a choice or documenting the constraint can be a natural-language policy violation.
The prompt mandates a specific Chinese-only output format, including Chinese labels and the Chinese colon character, which constitutes a locale/language constraint. Because the file does not offer an opt-in choice or explain that the skill is intentionally limited to a Chinese-language context, this is a natural-language policy issue.
The document requires inputs to use Chinese punctuation conventions such as the full-width colon and semicolon, and frames them as the strict canonical format. This imposes a language/locale-specific constraint without any opt-in or alternative locale path, which matches the policy concern for forced language/locale behavior.
L07 明确声明助手“只产出这段文本,不聊别的”，表示输出应仅限规范化 intro 文本。可是在 L57 又要求输出后追加一句“需要调整哪一项?”，这与前述“只产出这段文本”直接冲突，属于文档对行为意图的自相矛盾。
L56 要求最终输出时“只输出那几行标签，不要多余解释、不要代码块”，这定义了严格的单一输出格式。但 L57 紧接着要求在输出后再加一句确认问题，因此实际指令不可能同时完全满足两者，构成意图与文档指令的冲突。
