Security audit
Security checks for vulnerabilities and agentic risk
This is a prompt-and-style guide for creating Xiaohongshu image cards, with no executable code, persistence, credential access, or hidden data handling.
Installers should understand this skill is specialized for Xiaohongshu-style visual card prompts, with Chinese defaults for that platform. It appears safe from a security perspective, but users who want non-Xiaohongshu or non-Chinese content should explicitly choose the English, bilingual, or alternate-platform options described by the skill.
The description starts with several specific trigger phrases, but also says the skill should be used when the user 'wants to create visual card series for Xiaohongshu posts.' That condition is broad and lacks boundaries or negative examples, making it unclear when this skill should activate versus other general image or social-content skills.
The file includes Chinese-only labels such as '小红书首选' and '小红书备选', which imposes a specific language/locale in user-facing guidance. Because the document does not state that it is intentionally China-market specific or offer an alternative language option, this may violate language/locale policy expectations.
The heading includes a fixed Chinese style label "高冲击力风", which presents the preset in a specific language/locale without any opt-in or alternative. Under the policy, forcing a language without user choice can be a natural-language policy violation.
The file specifies a Chinese-language/cultural style directly in the title and description, including Chinese characters and a culturally specific aesthetic, without indicating that users can choose another language or locale. Under the policy for natural-language violations, forcing a specific language or locale without user opt-in should be flagged unless the constraint is explicitly justified.
The heading includes a fixed Chinese locale/style label "极简知识风", which presents the preset as tied to a specific language/style without indicating user choice or opt-in. Under the policy rule, language or locale constraints should either be optional or clearly justified.
The markdown includes a language rule stating that Chinese content should use specific Chinese punctuation. This is a locale-specific formatting requirement presented as mandatory, and the file does not indicate user opt-in or a documented regional/compliance justification.
No suspicious patterns detected.
