Security audit
Security checks for vulnerabilities and agentic risk
This is a China gaokao admissions-planning skill that uses public admissions data and user-provided student preferences, with no code execution, persistence, or credential access found.
Install this only if you want help with Chinese gaokao admissions planning. Expect to provide sensitive educational details such as score, rank, subject track, preferences, tuition limits, and possibly an application table; verify final recommendations against official provincial and university admissions sources before acting.
Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.
## Line-margin methodology
Do not judge by absolute score alone.
Calculate:
The skill description is broad enough to trigger on many ordinary college-choice requests without tight scoping or eligibility checks. Overbroad activation can cause the agent to invoke this skill in the wrong context, leading to irrelevant data retrieval, mistaken province-specific advice, or unwarranted collection of sensitive student preference data.
The skill is explicitly China-specific and Chinese-language-oriented, but it does not describe any user-consent or locale-selection behavior before applying those assumptions. If invoked for users in other education systems or languages, it may provide inapplicable guidance, mishandle expectations, or steer the conversation into a jurisdiction-specific workflow without confirmation.
The file presents key operational terms and guidance using Chinese-language labels and mixed Chinese text, but it does not state that the skill is intended only for Chinese-speaking users or provide any user opt-in for language/locale. This can violate language/locale policy expectations because the skill effectively assumes a specific language context without explicit choice or justification.
The natural-language comments and title hard-code a Chinese gaokao context using Chinese-only terms such as "志愿", "物理类/历史类", and "本科批". This constrains language and locale behavior without offering a user choice or documenting that the skill is explicitly limited to a China-specific admissions workflow.
The entire report template is written in Chinese and provides no indication that language choice is optional or user-selected. Under the natural-language policy rule, this can constitute a locale/language policy violation because it implicitly fixes the skill output language without opt-in or justification.
The checklist includes the Chinese item "志愿数量" while surrounding content is in English, which imposes a specific language in the skill text without any stated user opt-in or locale justification. This can violate language/locale policy because users expecting an English-only workflow may not understand required verification steps.
The instruction "Unverified data marked as需复核" embeds a Chinese-only label in an otherwise English checklist, with no language choice or explanation. This creates a locale-specific requirement that may be unclear to users outside that language context.