Security audit
Security checks for vulnerabilities and agentic risk
This is a plain Markdown content-writing workflow with no executable code or hidden system access.
Before installing, confirm you want a Chinese-language writing pipeline to activate on general article/content-creation requests, and separately review the referenced content-creation prerequisite if you plan to use it.
The manifest description includes very broad trigger phrases such as '写文章', '内容创作', and '启动创作流程', which can match many ordinary user requests and cause the skill to activate unexpectedly. This increases the chance of workflow hijacking or unintended delegation, especially because the skill coordinates multi-step role behavior and can reshape normal writing requests into its own pipeline.
The manifest description and skill content are entirely specified in Chinese, with no indication that the user may choose another language or that the workflow is intentionally limited to Chinese-language use. Under the language/locale policy, forcing a specific language without opt-in is a natural-language policy concern.
