Security audit
Security checks for vulnerabilities and agentic risk
This is a plain Markdown product-naming assistant with no hidden execution, persistence, credential use, or unrelated data access.
Before installing, expect the skill to ask for product, market, platform, competitor, and brand-voice details so it can score names. For non-English or multi-market launches, explicitly state the target language and country, and independently verify trademark and regulatory claims.
Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.
## TikTok Shop
### Display Rules
- **Visible in feed:** First 34 characters
- **Full search index:** Up to 255 characters
- **Lead with:** Hook phrase or product benefit (NOT brand name)
The workflow directs the user to identify buyer search phrases using English examples and treats those phrases as the required naming basis, while the skill elsewhere mentions multiple target markets. This creates a locale-policy issue because the guidance defaults to English-language naming/search behavior without explicitly asking the user to choose a language or confirming that the analysis should be localized.
Line L65 states 'Local language preferred; bilingual (EN + local language) accepted,' which directs output toward a specific language/locale by default. This is a natural-language locale policy constraint without any user choice or opt-in mechanism documented.
No suspicious patterns detected.