Security audit
Security checks for vulnerabilities and agentic risk
This skill is a local helper for creating and checking Chinese government-style DOCX documents, with no hidden exfiltration, destructive behavior, or persistence beyond normal installation.
Install this only if you want an agent to create Chinese official-style DOCX documents and inspect local font availability. Review the broad activation wording if you do not want ordinary notice/report drafting requests to use this format automatically, and prefer trusted or pinned install sources where possible.
def fc_list_families():
"""Linux/装有 fontconfig 的机器上用 fc-list 兜底，覆盖任意自定义字体路径。"""
try:
out = subprocess.run(['fc-list', ':', 'family'], capture_output=True,
text=True, timeout=60).stdout
except Exception:
return set()No suspicious patterns detected.