Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese GEO/content-writing guidance skill with no code execution, network access, credential handling, or hidden persistence.
Installers should expect this skill to guide GEO-oriented article drafting, usually in Chinese, and it may save generated markdown under geo-output/articles/ unless the user asks for a different output style. Review or adjust the activation phrases if you only want it to run for explicit GEO requests.
The activation phrases are broad enough to match many ordinary writing requests such as article generation or content creation, which can cause the skill to activate outside the user's clear intent. That increases the chance the agent applies this skill's workflow and constraints in unrelated contexts, leading to unintended behavior or policy bypass through skill over-selection.
The skill instructs the agent to create or write files in the workspace by default without explicit user consent or a warning that files will be created. In an agent environment, silent file creation can surprise users, overwrite expected workflows, or leave sensitive/generated content persisted locally when the user only asked for inline output.
The guidance specifies a title length as '中文20-30字', which constrains output to Chinese without indicating that the user may choose another language or locale. Under the policy, forcing a specific language without opt-in is a natural-language policy violation unless the locale restriction is clearly justified.
No suspicious patterns detected.
