Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent Chinese self-media article formatter with disclosed local HTML templates and no evidence of hidden privilege, exfiltration, or persistence.
Install only if you want Chinese WeChat/Toutiao article-formatting templates. Review generated HTML before publishing, especially if formatting non-Chinese content or pasting user-supplied HTML, because the templates are optimized for zh-CN publishing workflows.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<!-- 主色加粗文字 -->
<span style="color:PRIMARY;font-weight:600">强调文字</span>
<!-- 主色底高亮标签 -->
The document declares lang="zh-CN", which hard-codes a specific language/locale for the skill's output. Under the policy, locale restrictions should either be optional for the user or clearly justified as region-specific; this file provides neither.
The HTML shell template hard-codes lang="zh-CN", which imposes a specific language/locale in the generated output. The file broadly serves as a design system template rather than a clearly region-limited compliance tool, and it does not offer any user choice or explain why Chinese locale must be enforced.
This template sets lang="zh-CN" unconditionally, which enforces a specific locale in generated pages. Because the file presents reusable templates and does not provide a language-selection mechanism, this is a natural-language policy issue under locale choice requirements.
The document sets lang="zh-CN", which explicitly fixes the content locale to Simplified Chinese. Under the stated policy, forcing a specific language or locale without user opt-in or documented justification is a natural-language policy concern.
The document sets lang="zh-CN", which hard-codes a specific language/locale. Under the stated policy, locale constraints should either be optional for the user or clearly justified as region-specific; this file provides neither.
No suspicious patterns detected.