Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Chinese web-page test-case generator with minor consent and scoping caveats but no evidence of hidden or malicious behavior.
Before installing, understand that this skill may open and inspect web pages you provide and may save generated test cases as Markdown and CSV files. Use caution on authenticated or private business pages, and ask the agent to confirm filenames and locations before writing outputs.
The trigger conditions are broad enough to match ordinary requests for help writing test cases, which can cause the skill to activate outside its intended scope. In this skill, unintended activation may lead the agent to open supplied URLs and inspect live pages when the user may only have wanted generic advice, increasing the chance of unnecessary browsing or interaction with untrusted sites.
The skill specifies creating Markdown and CSV output files but does not clearly warn the user before writing files. This can lead to unexpected filesystem side effects, accidental overwrites, or persistence of potentially sensitive page-derived content without explicit user awareness or consent.
The description and examples are entirely in Chinese, and the skill does not indicate that language selection is optional or user-configurable. This can violate language/locale policy expectations when a skill implicitly forces a specific language without opt-in.
