Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese fortune-telling prompt skill with no bundled executable code, credentials, persistence, or data access beyond normal conversation.
Install only if you want Chinese-language folk-divination responses. Treat outputs as entertainment or cultural reference, not as medical, financial, legal, or life-planning advice; broad phrases about luck, career, or relationships may activate it.
All user-facing instructions and examples in the README are presented exclusively in Chinese, and the document does not indicate that language selection is optional or that the skill is intentionally limited to Chinese-speaking users. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
The example trigger phrases are broad, natural-language requests such as asking about recent luck or career fortune, which can overlap with ordinary conversation and cause unintentional skill activation. In an agent environment, this can lead to the skill responding when the user did not explicitly intend to invoke divination behavior, increasing prompt-routing mistakes and unexpected outputs.
The trigger list includes broad, everyday phrases such as '看看运势', '最近运气', and '问事业' that can match ordinary conversation unrelated to an intentional skill invocation. This can cause the skill to activate unexpectedly and steer conversations into fortune-telling content without clear user intent, increasing the risk of inappropriate routing or response hijacking.
The supported query examples include generic requests like '看看我的姻缘' and '最近事业如何', which are common conversational prompts that may be asked in many contexts. Because these examples define acceptable activation inputs, they blur the boundary between normal chat and deliberate skill use, making accidental invocation more likely.
This markdown file presents all user-facing content in Chinese, including the title, descriptions, and instructions to consult external sites. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be a locale policy issue when no alternative or justification is provided.
The only natural-language content in this file is written in Chinese, which can indicate a language-specific constraint without any opt-in or explanation. Under the policy rule for language/locale violations, this should be documented as intentional or made optional for users who do not use Chinese.
No suspicious patterns detected.
