Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Chinese-language content auto-poster, with public posting behavior that is visible and aligned with its purpose.
Install only if you intend to publish content to the listed external platforms. Review the target platforms and scheduled time before use, and do not provide confidential, unpublished, regulated, or internal content unless you want it posted publicly or sent to those services.
The skill metadata and entire user-facing description are presented only in Chinese, indicating a fixed language/locale experience. There is no statement that the skill is China-specific or that users may choose another language, which conflicts with the requirement to avoid forcing a specific language without opt-in.
The skill is explicitly designed to take user-provided content and publish it to third-party platforms, but it does not warn users that their data will be transmitted externally. This creates a real privacy and safety risk because users may provide sensitive, unpublished, or internal content without understanding it will be sent outside the local environment to multiple services.
