Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent Chinese-language helper for extracting structured fields from user-provided medical insurance documents, with no evidence of hidden execution, exfiltration, persistence, or destructive behavior.
Install only if you are comfortable processing insurance documents with a Chinese-language skill. Use it on files you intentionally provide, review the generated JSON carefully, and do not treat the extracted fields as authoritative without checking the original policy text.
The skill claims to perform structured extraction of 32 insurance-specific fields and output standard JSON, but the detected behavior only supports generic document text extraction. This mismatch is security-relevant because users or other agents may rely on the claimed structured output for automated processing, causing unsafe trust decisions, silent data quality failures, or downstream workflow misuse.
The skill instructs the agent to read user-supplied local files via scripts/parse_document.py <file_path> but does not declare any explicit tool scope, permissions, or allowed-tools boundary. This creates an authorization ambiguity where the agent may access broader filesystem content than intended, especially if a user or downstream prompt influences the file path.
The manifest description and the operational instructions are all presented only in Chinese, which can impose a specific language on users without opt-in. The policy allows fixed language only when choice is offered or the locale constraint is clearly documented and justified, which is not present here.
This markdown file contains user-facing instructions and format requirements solely in Chinese, which effectively forces a specific language for users of the skill. The policy allows locale constraints only when users are given a choice or the restriction is explicitly justified as region-specific, neither of which is stated here.
The skill description says it parses medical insurance policy documents and extracts 32 structured fields, including core and enhanced fields, with standard JSON output. In this file, the implemented behavior is limited to selecting a parser by extension, reading document text, and printing the raw extracted text without any field extraction or JSON serialization.
The docstring states the script supports PDF/DOCX/TXT parsing and extracts plain text, and the main docstring says it outputs text content. This contradicts the broader claimed intent of producing structured insurance-field JSON, because the documented purpose here is only plaintext extraction rather than the advertised structured parsing outcome.
This code file contains natural-language descriptions, usage text, and error messages exclusively in Chinese, which imposes a specific language on users without any opt-in or alternative locale. The policy allows locale constraints only when explicitly documented and justified or when users are offered a choice, neither of which appears here.
No suspicious patterns detected.
