Security audit
Security checks for vulnerabilities and agentic risk
This skill is a narrowly scoped troubleshooting guide for WorkBuddy OAuth connector failures, with one persistent but disclosed HKCU registry repair step users should approve before running.
Install only if you want Chinese-language help fixing WorkBuddy connector OAuth failures on Windows. Before applying the PowerShell registry fix, confirm the affected ProgId and browser path, export or record the existing HKCU key value, and understand that the change can affect links opened through that ProgId until reverted.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
关注关键信息：
- 哪个连接器失败？（如 `connector:qq-mail`）
- 连接的目标 URL 是什么？（如 `https://api.mail.qq.com/mcp`）
- 是否有 `captureResourceMetadataUrl` 日志？（表示 OAuth 发现阶段成功）
### 步骤 2：网络排除
The skill instructs the operator to modify HKCU registry associations to override browser launch behavior, but it does not clearly warn that this changes per-user system configuration and can affect how OAuth links and browser launches behave outside WorkBuddy. Even though the change is scoped to the current user and is intended as remediation, undocumented registry edits can cause confusion, persistence of altered behavior, or accidental misconfiguration.
The natural-language content of the skill, including description and operational instructions, is entirely in Chinese. Per the policy, forcing a specific language without user opt-in or a documented justification is a locale/language policy concern.
No suspicious patterns detected.