Security audit
Security checks for vulnerabilities and agentic risk
This is a Markdown-only Chinese legal-assistant planning and prompt skill with expected legal disclaimers and no executable or persistence behavior.
Install only if you want a Chinese/China-law oriented legal-assistant prompt and product-planning template. Before using it with real users, add clear privacy and retention notices, tell users to redact unnecessary sensitive information, and make any lawyer-review or data-localization claims provable.
The skill content and invocation description are entirely in Chinese and do not indicate that users may choose another language or locale. Under the policy, a skill that effectively enforces a specific language without opt-in should be flagged unless the restriction is explicitly justified as region-specific.
The heading and instruction require every AI output to append a disclaimer written in Chinese, and the file does not offer any user language preference or opt-in. This is a natural-language policy concern because it forces a specific language/locale across outputs rather than allowing user choice or documenting a justified region-specific constraint.
The registration form encourages collection of mobile numbers and related user profile data, while the immediate form copy lacks concise, contextual notice about purpose, retention, and handling. In a legal-assistant context, users may disclose sensitive matters, so unclear data practices can increase privacy risk, consent defects, and regulatory exposure.
The file defines all prompt templates and output structures exclusively in Chinese, including directives such as '永远先讲"人话"' and fixed Chinese section headers, without indicating that users may choose another language. This creates a locale/language policy issue because the skill effectively mandates a specific language rather than offering opt-in or documenting a justified regional restriction.
This skill processes highly sensitive legal materials, including contracts, identity details, financial terms, family agreements, and potentially litigation-related evidence, but it does not instruct users to redact sensitive data or warn them about privacy, confidentiality, and retention risks before upload. In a legal-assistance context, this omission is more dangerous than in ordinary document-processing skills because submitted materials may contain trade secrets, personal data, and privileged or strategically sensitive information whose exposure could cause legal, financial, or reputational harm.
This legal-advice skill provides authoritative-sounding guidance on legal research, statutory retrieval, and compliance questions without an explicit warning that outputs may be incomplete, jurisdiction-specific, time-sensitive, and not a substitute for qualified legal counsel. In a legal context, users may rely on inaccurate or outdated answers when making business, compliance, litigation, or personal rights decisions, which can lead to significant financial or legal harm.
This markdown file contains only Chinese-language instructions and planning content, but it does not state that the skill or documentation is intended specifically for Chinese-speaking users or offer any language/locale opt-in. Under the policy, forcing a specific language without user choice can be a natural-language policy violation unless the locale constraint is clearly documented and justified.
The skill content is written exclusively in Chinese and provides no indication that users can select another language or that the locale restriction is intentional and documented. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be a locale-policy issue.
L017 claims '法条引用实时可溯源，律师定期审核,' which describes specific product behaviors and oversight processes. In this file, those statements are presented as factual product capabilities, but the artifact itself is only promotional copy and does not implement or evidence either traceability or lawyer review.
L018 states '数据本地化部署，严格遵守《数据安全法》' as a concrete product property, but this file contains only landing-page copy and no supporting implementation. This is an active documentation/marketing claim about operational behavior that is not substantiated by the actual code artifact being analyzed.
This markdown file contains user-facing planning and compliance instructions exclusively in Chinese, with no indication that the skill supports language selection or that Chinese is a deliberate locale-specific constraint. Under the natural-language policy rules, forcing a specific language without user opt-in can be a locale policy violation.
All user-facing instructions, workflow steps, and examples are presented in Chinese, which can amount to a language policy constraint if users are not explicitly given an opt-in or alternative locale. The file does not state that the skill is intentionally limited to Chinese-speaking or China-law contexts, nor does it offer another language option.
The document is entirely written around Chinese legal content and explicitly recommends Chinese-only embeddings and Chinese citation formats, with no indication that users may opt into another language or locale. That can violate language/locale policy when a skill implicitly mandates one language without user choice or explicit regional scoping.
The document presents all instructions, workflow steps, and output templates exclusively in Chinese. Under the stated policy, forcing a specific language without offering a user choice or documenting a justified locale constraint can be a natural-language policy violation.
