Security audit
Security checks for vulnerabilities and agentic risk
This skill generates reading-activity documents and writes them locally; its file actions are disclosed and scoped to generated output, with no evidence of credential access, remote code, persistence, or hidden behavior.
Before installing, confirm that you are comfortable with the skill creating files under E:\Temp\ReadingActivities and packaging generated outputs into a zip. The documented workflow uses .xls filenames even though the helper rejects .xls, so the publisher should fix that format mismatch for reliability.
声明的技能核心目的是基于书名生成读书活动及相关文档内容，而实际代码只是一个通用的 Excel 导出工具：接收文件路径和数据字典，构造 DataFrame 后写入 Excel 文件。它既不处理书名，也不生成活动方案、打卡计划或题库内容。虽然“生成文档”可能间接需要导出文件，但该代码片段本身只覆盖存储环节，和声明的主要功能存在明显偏差，因此应判定为描述与行为不匹配。
The skill instructs the agent to create directories and files, compress them, and then delete the originals by moving them to the recycle bin, but it does not require explicit user consent or clear warning before making these filesystem changes. This is dangerous because a user may invoke a content-generation task without realizing it will persist data locally and alter the filesystem, which can lead to unwanted data storage, overwrite/confusion risks, and privacy issues if book titles or generated content are sensitive.
The natural-language strings in the docstring and return values are exclusively in Chinese, which imposes a specific language choice on users without offering an alternative or opt-in. This can violate language or locale policy when a skill is expected to be generally usable across users.
The natural-language description, trigger examples, workflow responses, and edge-case messages are all specified only in Chinese, with no indication that users may choose another language. This can violate a language/locale policy when no opt-in or documented regional limitation is provided.
The function writes data to the filesystem with df.to_excel(filePath, index=False), which can overwrite or create files, but there is no confirmation prompt or explicit warning about this side effect. The docstring describes saving a file, but it does not caution about potential overwrite or data impact.
No suspicious patterns detected.
