Security audit
Security checks for vulnerabilities and agentic risk
This is a Markdown-only Chinese investment checklist skill with no code or data access, but its buy and position-size guidance should be treated cautiously as educational support, not financial advice.
Install only if you want a Chinese-language checklist for investment reflection. Treat its scores, buy/observe/avoid labels, and suggested position sizes as prompts for your own analysis, not as personalized financial advice or permission to trade.
The skill gives recommendation bands, buy/observe/avoid judgments, and suggested position sizing without any disclaimer that the output is informational rather than financial advice. That increases the risk that users treat the output as authoritative personalized investment guidance, which is especially sensitive because it may influence real money decisions.
The trigger phrases are broad enough to activate during ordinary investing conversations, which can cause the skill to run without clear user intent. In this context, unintended activation is more concerning because the skill provides structured investment recommendations and position-sizing guidance, potentially steering financial decisions when the user only asked a general question.
The entire skill file is written only in Chinese and does not indicate that language selection is optional or that the skill is intentionally limited to a Chinese-speaking or China-specific audience. Under the policy, a skill that effectively forces one language without opt-in can be a natural-language policy violation.
The file presents all user-facing documentation in Chinese, starting with the title and continuing throughout the README, with no indication that other languages are supported or optional. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
The file presents the skill name, instructions, examples, and trigger phrases exclusively in Chinese, which effectively forces a specific language experience. There is no user opt-in, alternative language option, or stated regional justification for this language constraint.
This markdown file contains user-facing natural language exclusively in Chinese, and there is no visible opt-in, alternative language option, or justification for a Chinese-only locale. Under the policy rule, forcing a specific language without user choice can be a locale-policy violation.
The entire template is written in Chinese and does not indicate that other languages are supported or that Chinese is required for a region-specific purpose. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
No suspicious patterns detected.
