Security audit
Security checks for vulnerabilities and agentic risk
This skill is a domain-specific Chinese report-writing helper that reads user-provided materials and creates a Word report, with no evidence of hidden execution, exfiltration, or persistence beyond the requested document.
Use this skill for Chinese State Grid or similar HR-management research reports. Provide only documents you are authorized to process, review the generated report for accuracy, and ask the agent to use a new filename or confirm before overwriting an existing .docx file.
The skill is configured to trigger on a very broad set of common keywords such as '研究报告', '国网', and '绩效考核', which can cause unintended activation in conversations that merely mention these topics. Over-broad invocation increases the chance the agent processes sensitive enterprise HR, policy, or internal project content in the wrong workflow, creating data handling and authorization risks.
The manifest description is entirely framed as a Chinese-language skill for generating professional reports, and the body reinforces a specific Chinese writing style and terminology. Because the file does not offer language choice or explicitly document that Chinese output is a justified fixed requirement, this is a natural-language locale policy concern.
The skill instructs the agent to generate and save a .docx file into the workspace without requiring user confirmation or explaining whether an existing file may be overwritten. This can lead to unintended file creation, accidental overwrite of prior work product, or persistence of potentially sensitive report content without the user's informed consent.
This markdown file presents all user-facing guidance exclusively in Chinese, and it does not state that the skill is intended only for Chinese-speaking users or a China-specific workflow. Under the language/locale policy rule, forcing a single language without user opt-in can be a natural-language policy violation.
This markdown file is a natural-language style guide entirely prescribing Chinese phrasing, terminology, and sentence patterns for report writing. Because it imposes a specific language/locale convention without any opt-in or stated region-specific justification in the file, it matches the policy-violation category for language or locale constraints.
No suspicious patterns detected.
