Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed desktop-settings helper that can persistently change the current user's UKUI/GNOME settings but does not show hidden network, persistence, or destructive behavior.
Install only if you intend to let an agent read and change your current user's UKUI/GNOME desktop settings. Before applying a preset or using set, export your current configuration so you can restore it, and review preset JSON for keys that may affect display, power, keyboard, mouse, shortcuts, themes, or privacy-relevant paths.
The README instructs users to apply presets and set individual GSettings keys but does not clearly warn that these commands modify live desktop/user configuration. This can lead users or downstream agents to make persistent configuration changes without understanding the scope, potentially disrupting the desktop environment, power settings, themes, or other UKUI behavior.
The skill exposes shell execution plus file read/write behavior through documented commands, but the manifest does not declare any explicit tool scope or permission boundaries. In an agent ecosystem, this increases the chance that the skill is invoked with broader-than-expected authority and makes review, policy enforcement, and least-privilege isolation harder; because it can modify user desktop settings in bulk, the impact is more than purely informational.
The main descriptive and instructional content begins in Chinese, which effectively forces a specific language for users reading the skill documentation. The policy allows locale constraints only when clearly documented and justified, or when users are given a choice; neither is present here.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def run_gsettings(args_list):
try:
result = subprocess.run(
["gsettings"] + args_list,
stdout=subprocess.PIPE,
stderr=subprocess.PIPE,
This code consistently uses Chinese-only natural-language strings for errors, warnings, status output, and help text. Because the file does not offer a language/locale option or indicate that it is intentionally limited to a Chinese-speaking environment, it can violate language/locale policy requirements.
No suspicious patterns detected.