Security audit
Security checks for vulnerabilities and agentic risk
This skill is a read-only operational reporting guide for timeout analysis, with no hidden install, persistence, or destructive behavior found.
Before installing, confirm users who run it have legitimate read access to the referenced job tables and understand that reports may include operational identifiers such as req_ssn. The skill should remain limited to read-only diagnostics and single-day scoped queries as documented.
The skill content is written as mandatory operational guidance in Chinese, including default behavior and routing instructions, but it does not state that the user can choose another language. This creates a language/locale policy concern because the skill appears to enforce a specific language without explicit user opt-in or a documented region-specific justification.
The output contract includes median, p90, p95, and samples, while the only concrete duration SQL returns timeout_cnt, avg_hours, and max_hours, and no sample SQL template is actually defined. This is an active documentation-to-implementation mismatch because the file specifies these outputs as part of the skill contract but does not implement them in the shown execution logic.
