Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed AI and technology news helper with low security impact, though its package appears to omit the scripts it tells the agent to run.
Before installing, confirm you want a Chinese-language AI news workflow that fetches public web/RSS sources. Also verify the referenced scripts are actually included by the package you install, because this reviewed artifact only contains the instruction file.
The natural-language content, including the description, usage guidance, and trigger phrases, is presented only in Chinese. This can amount to a language policy violation when the skill effectively forces a specific language without user opt-in or an explicit region/language limitation.
The trigger list includes broad, everyday phrases such as requests for 'AI news' or 'what news is there today', which can cause the skill to activate in situations broader than intended. Over-broad activation increases the chance of unintended invocation, context hijacking, or routing user requests into a network-fetching skill without clear user intent.
No suspicious patterns detected.
