Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed local wiki-index workflow with minor data-safety and language-usability caveats, not evidence of malicious behavior.
Install only if you want a Chinese-language local wiki index. Keep control of wiki/wiki.json, validate JSON before restoring from wiki.json.bak, and review referenced memory/source paths before loading private details.
The entire skill design document is written exclusively in Chinese and does not indicate that language choice is optional or limited to a justified region-specific context. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy concern.
The skill instructs direct backup overwrite and restore operations using cp without any integrity validation, versioning, or warning about clobbering newer data. In this context, a malformed, stale, or attacker-tampered backup could silently replace the live index, causing data loss or persistence of poisoned entries that shape later retrieval behavior.
The document presents all instructions, labels, and examples in Chinese and does not indicate that users may choose another language or locale. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern unless the locale restriction is explicitly documented and justified.
No suspicious patterns detected.
