Security audit
Security checks for vulnerabilities and agentic risk
The package contains no executable code and its runtime skill file is empty, so it does not request or exercise risky authority.
This skill appears low risk from a security perspective, but it also appears incomplete because the main SKILL.md file is empty. Reviewers should expect little or no actual cost-control behavior unless the package is updated with real runtime instructions.
The primary descriptive text is written in Chinese, and the file does not provide an English alternative or state that the skill is intended only for a Chinese-speaking or region-specific audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The manifest description is written entirely in Chinese, which signals a language-specific constraint in the skill metadata without offering an opt-in or explaining that the skill is intended only for Chinese-speaking users. This creates a natural-language policy concern because the skill appears to impose a locale/language choice by default.
