Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed break-reminder helper that stores minimal timing settings and does not show hidden, destructive, credential, or network behavior.
Before installing, confirm the default Chinese reminder text and Asia/Shanghai timezone fit your use case, and adjust the configuration if you want another locale. Expect the skill to store a small local JSON state file with reminder settings and timestamps so reminders can resume after restart.
The instruction Use clear language when data is missing: “待补充” mandates a Chinese phrase for a user-facing response. This imposes a specific language choice without offering the user a locale preference or documenting a justified region-specific constraint.
This manifest-style JSON sets the timezone to Asia/Shanghai and all reminder templates are written only in Chinese, which imposes a specific locale and language by default. The file does not indicate that users can choose another language or locale, nor does it document a region-specific purpose that would justify the constraint.
The test case hard-codes timezone=Asia/Shanghai, which is natural-language/config-like content implying a specific locale setting. Because there is no nearby indication that the timezone is user-configurable, optional, or justified as region-specific, this can violate the policy against forcing a locale without user opt-in.
No suspicious patterns detected.
