Security audit
Security checks for vulnerabilities and agentic risk
This is a real-estate marketing writing skill with disclosed file-reading and search steps, and I found no hidden execution, persistence, credential handling, or destructive behavior.
Before installing, be aware that the skill may read uploaded real-estate project files and automatically use web or image search to enrich marketing outputs. Avoid uploading confidential planning, pricing, or client materials unless you are comfortable with those materials being processed for this purpose.
The skill manifest defines very broad trigger phrases and explicitly requires invocation for nearly any real-estate-related writing request or uploaded project material. This can cause the skill to preempt more appropriate tools or user-directed workflows, creating prompt-routing hijack risk and reducing user agency over how their data and requests are handled.
The skill assigns output language by geography when the user has not explicitly chosen a language. This overrides user preference with an inferred attribute, which can produce unintended disclosures, incorrect language handling, or a degraded user experience in multilingual or cross-border contexts.
The entire skill description is written only in Chinese and provides no indication that users may choose another language or locale. Under the policy rule for natural-language violations, this can be interpreted as imposing a language constraint without explicit opt-in or justification.
The instruction '语言密度要高，每一句话都须承受得住细读' imposes a specific writing-style and language-density requirement as a default behavior. This is a natural-language policy concern because the file provides no user choice or opt-in regarding language or communication style.
This markdown file is entirely Chinese-language content and does not indicate that the skill is intentionally limited to Chinese-speaking users or a China-specific workflow. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.
Line L115 prescribes a locale/cultural-language preference based on project type: Chinese traditional projects should prioritize Chinese classics, while international/modern projects should prioritize Western writers or philosophers. This is a natural-language policy issue because it steers language/locale choice by default rather than offering the user an explicit choice or opt-in.
This markdown file presents all guidance in Chinese and does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-language audience. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation.
No suspicious patterns detected.
