Security audit
Security checks for vulnerabilities and agentic risk
This is a presentation-design instruction skill with no hidden code, persistence, credential use, or external access.
Installers should expect this skill to influence presentation and slide-design requests, especially Block-style PPT work. Be aware that the trigger may be broader than ideal and the instructions are written in Chinese, so ambiguous 'block' or slide-related requests could route here.
The trigger criteria are broad enough to match many ordinary requests about PPTs, slides, or any mention of 'block', which can cause unintended skill invocation. This creates routing and prompt-scope risk: the agent may activate this skill when the user did not want a visual-design transformation, leading to incorrect behavior, context hijacking, or interference with more appropriate skills.
The natural-language content of the skill is written entirely in Chinese and instructs the agent role and workflow in that language, but does not state that the user may choose another language. This can constitute a language/locale policy issue because the skill appears to impose a specific language without explicit user opt-in or a documented region-specific justification.
