Security audit
Security checks for vulnerabilities and agentic risk
This skill provides a disclosed Chinese-language company-culture investment checklist and a local analysis script, with no evidence of hidden access, persistence, exfiltration, or privilege-seeking behavior.
Install only if you want a Chinese-language, Duan Yongping-inspired subjective culture analysis framework. Treat its investment ratings as a checklist-style aid, not financial advice or a substitute for independent research.
The file presents the skill documentation entirely in Chinese and explicitly frames it around Chinese investment wisdom, but it does not state that the skill is region-specific or offer any language/localization choice. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy concern.
The skill is authored entirely in Chinese and does not specify language negotiation or adaptation to the user's preferred language. In multilingual environments this can lead to unusable outputs, misunderstanding of criteria, or accidental disclosure of analysis in an unexpected language, though it is primarily a quality and safety-boundary issue rather than a direct security exploit.
The skill description uses broad activation conditions such as '当用户需要分析企业文化时' and '当用户问"这家公司文化怎么样"时', which can trigger the skill for vague, underspecified requests. This can cause inappropriate routing or over-application of a subjective investment/culture framework to queries that may need neutral analysis, narrower domain expertise, or user clarification first.
This Python skill presents its title, analysis framework, questions, ratings, and user-facing instructions entirely in Chinese. The file does not offer any user opt-in, locale selection, or justification for restricting output to a specific language, which creates a natural-language policy concern under the language/locale rule.
The entire template is written in Chinese and provides no indication that users may choose another language or that the template is intended only for a Chinese-language or region-specific context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
No suspicious patterns detected.
