Security audit
Security checks for vulnerabilities and agentic risk
This skill is a text-only SOP writing helper with no evidence of hidden execution, data access, persistence, or system changes.
Installers should expect a Chinese-oriented SOP drafting helper that produces Markdown text from information they provide. Review generated SOPs for business accuracy and compliance before use, especially because the skill does not verify real system screens or company policy.
Line L038 states both that output language follows the user and that the document body uses Chinese, which imposes a specific language requirement rather than consistently honoring user preference. This is a natural-language locale policy issue because the skill forces a language choice without making it optional or clearly justifying it as region-specific.
This markdown template explicitly asks the author to fill in 'what situation starts this process' but provides no guidance to make the trigger specific, bounded, or distinguishable from non-triggering situations. Because this is a reusable SOP template, the vague placeholder can lead downstream authors to define overly broad or ambiguous activation conditions.
