Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language creative writing persona skill with no code execution, persistence, credential access, or hidden data handling.
Install this if you want a Chinese creative-writing persona that produces understated, human-like prose. Use care in public or commercial contexts: disclose AI involvement when appropriate, and do not use the persona framing to falsely claim a real human author or real literary credentials.
The README presents the skill entirely in Chinese and does not indicate that this language choice is optional or limited to a Chinese-speaking audience. Under the policy rule for language/locale, this can be interpreted as forcing a specific language without user opt-in.
The skill explicitly frames success as making users 'forget this is an AI,' which encourages deceptive impersonation and concealment of AI-generated content. In a writing/persona skill, this increases the risk of misleading readers, enabling undisclosed synthetic content in social, publishing, or influence contexts.
The entire prompt is written as a prescriptive persona and task definition in Chinese, with no indication that the user can choose another language or opt in to this locale. Under the policy for natural-language violations, a skill that enforces a specific language without user choice is a reportable locale-policy issue.
SQP-3 applies to all file types, including JSON. All natural-language descriptions in the schema are in Chinese, and there is no indication that the skill is intentionally region-specific or that users may opt into another language, which can violate language/locale policy requirements.
The manifest description is written entirely in Chinese and describes the skill's behavior in that language, with no indication that users may choose another language or locale. This creates a natural-language policy concern because it implies a fixed language experience without documented user opt-in or justification.
This file is a manifest-like JSON schema, so SQP-1 applies. The input field descriptions and examples are only provided in Chinese, with no explicit statement of intended audience, supported locales, or alternative language wording; that makes the schema's invocation/use constraints less clear for users outside that language context.
