Security audit
Security checks for vulnerabilities and agentic risk
This skill is a lightweight workflow prompt for keeping agents aligned, with one disclosed but potentially surprising workspace note update.
Install only if you want a Chinese-language workflow prompt for keeping agent work aligned. Before using it, decide whether agents may update HEARTBEAT.md automatically; otherwise, require them to show the proposed status text and wait for your approval before writing the file.
The description and all operative instructions are written entirely in Chinese, which effectively constrains use to a specific language without any opt-in or alternative language path. Under the policy, language restrictions should either be optional for the user or clearly justified as region-specific.
The skill instructs the agent to update HEARTBEAT.md on session exit without any warning, consent check, or scope restriction for modifying files in the user's workspace. This can lead to unauthorized or unexpected file writes, which is risky in agent environments where documentation instructions may directly influence tool use and persistence.
