Security audit
Security checks for vulnerabilities and agentic risk
This skill is a small Chinese-language investment-analysis framework with a clear China-focused thesis and no hidden system access, persistence, or data exfiltration behavior.
Install this only if you want a Chinese-language, China-focused long-term investment analysis lens. Treat its conclusions as framework-based commentary, not personalized financial advice, and ask the agent to consider your market, jurisdiction, risk tolerance, and counter-scenarios before acting on any investment output.
The README is written entirely in Chinese, including headings, usage instructions, and descriptions, with no indication that users may choose another language or that the skill is region-specific. This creates a natural-language policy concern because it imposes a specific language on all users without documented opt-in or justification.
The skill presents a region-specific investment conclusion ('中国是最大机会') as a core principle without asking for the user's market scope, risk profile, or geographic focus. In an investment-analysis skill, this can bias outputs toward a predetermined conclusion and cause unsuitable or misleading recommendations for users outside that context.
The closing slogan again promotes China as the 'biggest opportunity' in absolute terms, reinforcing a built-in geographic investment bias. Because this appears in a persuasive closing statement rather than a conditional analysis section, it increases the chance that the agent will steer users toward one jurisdiction regardless of their objectives or suitability.
This Python skill presents its title, docstrings, prompts, and user-facing output exclusively in Chinese. The policy requires flagging language or locale constraints when a skill forces a specific language without user opt-in, and this file provides no alternative language path or justification for the restriction.
The entire template is written in Chinese and provides no indication that users may choose another language or locale. Under the stated policy, a skill that forces a specific language without user opt-in is a natural-language policy concern.
No suspicious patterns detected.
