Security audit
Security checks for vulnerabilities and agentic risk
This is a simple error-handling and logging guidance skill with no executable code, persistence, network behavior, or hidden authority.
Installers should expect this skill to guide an agent toward Chinese-language examples for ApiException handling and logging. It is low risk, but users who work in another language or only want project-specific activation may want narrower trigger wording.
The 'when to use' section lists generic triggers such as '加错误处理', '加日志', and '异常处理', which overlap with common user requests and are not narrowly scoped to this specific skill. The file does not provide exclusion conditions or negative examples to clarify when this skill should not activate.
The skill title and instructional content are predominantly in Chinese, and the file does not indicate that users may choose another language. This can violate a language/locale policy when a specific language is imposed without user opt-in.
No suspicious patterns detected.
