Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language consulting skill for real-estate community operations, with no executable code, persistence, credential handling, or hidden destructive behavior found.
Before installing, expect this skill to guide a real-estate community operations planning workflow, ask for company or customer research materials, use web search for company context, and render visual planning diagrams. Do not provide confidential customer-level data unless it is necessary for the consulting task.
The manifest uses an extensive keyword list and explicitly says the skill 'must be immediately invoked,' which can cause over-triggering and routing hijacks. This is dangerous because the skill may preempt more appropriate tools or be activated on loosely related user requests, increasing the chance of irrelevant handling, unwanted web access, and prompt-scope capture.
The description assumes Chinese output without offering a language choice, which can cause the skill to respond in an unintended language and reduce user control. While not a direct security exploit, it is a policy and usability weakness that can contribute to misrouting or mishandling in multilingual contexts.
No suspicious patterns detected.
