Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese-language resume analysis skill with no code or persistence; privacy and language guidance could be clearer, but the behavior is purpose-aligned.
Before using it, consider removing phone numbers, addresses, IDs, or other unnecessary personal identifiers from the resume text. Expect Chinese-language analysis unless you separately ask your agent to respond in another language.
The skill description is broadly scoped to analyze resumes and provide optimization advice, which can cause over-triggering on common hiring or document-editing requests without clear boundaries. This increases the chance the skill is invoked on sensitive personal data unnecessarily, expanding exposure of resume contents and potentially producing unsolicited transformations of user-provided PII.
The description and all examples are written entirely in Chinese, and the sample inputs/outputs imply the skill operates in Chinese by default, but there is no statement that the skill is China/Chinese-specific or that users may choose another language. This can violate language/locale policy when a skill effectively forces a language without opt-in or justification.
Resumes commonly contain sensitive personal data such as names, phone numbers, email addresses, employment history, and education records. Omitting a warning or handling guidance encourages users to submit raw PII without minimization, increasing privacy and compliance risk if the data is processed, retained, or shared beyond what the user expects.
The only natural-language description of the skill is written entirely in Chinese: "这是一份简历分析助手skills". This indicates a language-specific presentation without any indication that users can choose another language or opt in to Chinese, which matches the locale/language policy concern.
