Security audit
Security checks for vulnerabilities and agentic risk
This skill is a clearly disclosed local setup and audit tool that changes supported agent instruction files only when explicitly applied.
Install only if you want this skill to persist delegation rules into your agent's instruction files. Run the provisioning script first without --apply to review the target files, keep the generated backups, and read the Chinese rule block before applying it globally.
The skill describes scripts that detect local agent environments and write to instruction/config files, but it does not declare any explicit tool scope or allowed-tools constraints. That mismatch increases the chance an agent will grant broader file and environment access than users expect, enabling unintended modification of local files or configuration through a loosely scoped skill.
The description lists trigger phrases such as “AI不回话”, “等太久”, “助手响应慢”, and “响应速度”, which are generic expressions that can appear in many ordinary conversations unrelated to this specific skill. The file does not provide negative examples or clear exclusion conditions to distinguish when the skill should activate versus when it should not.
The section says to use the skill when a user complains about waiting too long, interruptions being blocked, or wanting to chat frequently, but these conditions are high-level symptoms rather than precise invocation criteria. Without boundaries, the skill could be invoked in situations where the user is only expressing frustration, not asking for this configuration workflow.
The file is written as normative skill guidance entirely in Chinese and presents its instructions as the authoritative implementation reference. There is no indication that users may opt into another language or that the Chinese-only presentation is required for a region-specific purpose.
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
path.parent.mkdir(parents=True, exist_ok=True)
if exists:
rec["backup"] = str(backup(path, stamp))
path.write_text(new, encoding="utf-8", newline="")
applied = True
actions.append(rec)
The rule block is entirely written in Chinese and presents itself as operational policy to be inserted into system prompts or custom instructions, with no indication that language should follow user preference. Inserting fixed-language governance text can degrade usability, cause misunderstanding of safety/operational rules by users or operators who do not read Chinese, and effectively impose a locale without opt-in.
The manifest describes a local, zero-dependency skill for provisioning and auditing agent instruction files. The author-contact section adds external social/contact channels and a remote image URL, which are not justified by the operational purpose of configuring agent responsiveness and extend the skill content into self-promotion.
No suspicious patterns detected.