Security audit
Security checks for vulnerabilities and agentic risk
This Chinese-language live-commerce reporting skill searches public industry sources and saves a local daily report, and those behaviors are disclosed and fit its purpose.
Install this if you want a Chinese live-commerce daily report and are comfortable with the agent using web search, reading yesterday's saved report in the configured folder, remembering your report preferences if the host supports that, and writing Markdown or HTML files to the chosen local path.
The README presents the skill name, trigger phrase, and all interaction examples exclusively in Chinese, and the trigger appears language-specific. Under the policy, forcing a specific language without opt-in can be a natural-language policy violation unless the locale restriction is explicitly documented and justified.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
# WorkBuddy 用户
mkdir -p ~/.workbuddy/skills/ecom-daily-report
cp SKILL.md ~/.workbuddy/skills/ecom-daily-report/
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
### 安装方法
1. 将本文件（`SKILL.md`）放入你的 Skill 目录：
- WorkBuddy：`~/.workbuddy/skills/ecom-daily-report/SKILL.md`
- 其他工具：参考各自的 Skill 安装文档
2. 重启 AI 工具 或 刷新 Skill 列表
3. 输入 `今日直播电商日报` 即可触发
The documentation says users can specify '保存到 ~/Documents/' and later states that the report is automatically saved as a Markdown file locally. Because this behavior affects user data and filesystem state, the skill description should explicitly disclose that it creates or overwrites files on disk.
This markdown file states that the skill will '优先抓取' content from external platforms such as 36氪、今日头条 and 微博, which implies network requests and transmission of user/system context to third-party services. The README explains the feature but does not explicitly warn users about external access or privacy implications.
The HTML template hard-codes lang="zh-CN", which specifies a single locale for generated output. The document does not indicate that users can choose another language or locale, so this is a natural-language locale policy constraint without opt-in.