Security audit
Security checks for vulnerabilities and agentic risk
This is a documentation-only Nano PDF workflow helper with overly broad activation wording but no code execution, credential access, persistence, or hidden data handling.
This skill is reasonable to install for Nano PDF workflow guidance, but users or maintainers should tighten the trigger terms or disable implicit invocation to avoid accidental activation during generic PDF, editing, or language-related requests.
The trigger list includes extremely generic terms like 'nano', 'pdf', 'edit', 'language', and 'instructions', which can cause the skill to activate for many unrelated requests. Over-broad activation increases the chance of unintended routing, prompt interference, and the skill being invoked in contexts where its assumptions or behaviors do not fit the user's intent.
The trigger list includes very broad, common terms such as "nano", "pdf", "edit", "natural", and "language", which can cause the skill to activate in many unrelated conversations. Overbroad activation increases the chance the agent applies the wrong workflow, introduces irrelevant instructions, or overrides more appropriate skills in contexts involving document handling or general editing.
The trigger examples use very broad natural-language phrasing such as 'Help me...' and 'I need a practical workflow...', which can match many ordinary requests and cause the skill to activate unintentionally. In an agent environment, overbroad activation can route unrelated user tasks into this skill, producing incorrect handling, confusion, or unsafe application of PDF/workflow guidance outside the intended context.
The trigger phrases are broad enough to match ordinary user requests about PDFs, editing, or practical workflows, which can cause the skill to activate outside its intended scope. In an agent environment, overbroad activation increases the chance of unintended prompt injection surface, wrong-tool selection, and user confusion because the agent may invoke this skill for generic tasks unrelated to the validated workflow.
The file labels separate English and Chinese documentation variants, but this README itself is specifically a zh-CN localized document and does not indicate any user language selection or opt-in behavior. Because locale-specific handling is presented without an explicit user choice in the natural-language instructions, it may conflict with language/locale policy expectations.
The example trigger sentences use broad everyday phrasing such as 'Help me' and 'I need a practical workflow', which provides weak boundaries for activation and may match ordinary user requests. This can lead to accidental invocation, confusing behavior, and expanded attack surface if unrelated conversations are routed through this skill.
文件名和正文均表明该技能为 zh-CN 中文版本，但文档中未说明这是用户可选的本地化版本，也未提供语言选择或切换说明。按照语言/区域策略，若强制特定语言而没有用户选择或正当限定，可能构成自然语言政策问题。
The enablement description says to use the skill when users ask for broad categories like work-productivity, nano, pdf, edit, or general workflow/checklist/analysis support, but it does not define clear inclusion and exclusion criteria. This ambiguity can lead to accidental routing of unrelated tasks into this skill, reducing reliability and potentially causing unsafe or inapplicable guidance to be presented as relevant.
The default prompt includes broad, common-language trigger terms such as work-productivity, nano, pdf, edit, workflow, checklist, and analysis, which are likely to overlap with normal user requests. Because implicit invocation is enabled, this can cause the skill to activate unintentionally and inject its prompt/context into unrelated conversations, creating prompt-scope confusion and increasing the chance of inappropriate tool use or data exposure.
The trigger phrases are broad, natural-language sentences containing generic terms like 'help me', 'practical workflow', and 'hardening', which can match many unrelated user requests and cause unintended invocation. In an agent ecosystem, overbroad routing can expose this skill in contexts it was not designed for, leading to incorrect task selection, confusion, or accidental execution of PDF-related workflows when the user intended something else.
