Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Chinese-language industry-map research template with expected web research and file output behavior, and no evidence of hidden execution, credential access, persistence, or exfiltration.
Install this if you want Chinese-language industry-map generation and are comfortable with comprehensive web research plus creation of CSV/Markdown outputs. Ask the agent to confirm before running it for generic market questions or if you need English output or a lighter research pass.
The trigger description is very broad and covers common requests like industry analysis, industry structure review, and map generation, which can cause the skill to activate for generic analytical tasks where the user did not specifically request this workflow. That increases the chance of unintended tool invocation, excessive research behavior, and scope hijacking away from a user’s actual intent.
The skill mandates Chinese naming and output conventions without checking user preference, which can override the user’s requested language or formatting expectations. While not a direct security flaw, it creates controllability and policy-compliance risk by reducing user agency and making the skill more likely to produce outputs inconsistent with surrounding workflows.
This CSV uses Chinese labels and descriptions throughout, but the file does not state that it is intended only for Chinese-language users or offer any language/locale opt-in. Under the language/locale policy, forcing a specific language without documented choice or justified regional scope is a natural-language policy concern.
This SVG’s visible natural-language content is presented entirely in Chinese, beginning with the title at L012. For a skill artifact, that imposes a specific language/locale without any opt-in, alternative locale, or documented region-specific justification in the file.
No suspicious patterns detected.
