Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Chinese-language A-share market observation checklist, with no hidden execution, persistence, credential use, or destructive behavior.
Before installing, treat this as a planning and observation aid, not a broker or automated trading tool. Provide holdings only if you want them reflected in the checklist, verify market data independently, and make sure any final investment decisions remain user-directed.
The file presents its description and operational instructions exclusively in Chinese, with no indication that the user can choose another language or that the locale restriction is intentional and justified. This can violate language/locale policy where skills should not force a specific language without user opt-in.
The 'When To Use' section lists triggers such as '把观察项落下来' and '用户要每日复核框架' that are natural, high-level phrases without explicit constraints, negative examples, or narrow context. This makes it unclear when the skill should activate versus when a different planning or analysis skill would be more appropriate.
The natural-language prompt hard-codes a mixed English/Chinese instruction ("Use a-share-observation-loop to把研究结论改成每日观察清单。") rather than offering a language or locale option. This can be a language-policy issue because the skill implicitly forces a specific mixed-language interaction style without user opt-in or justification.
This markdown file presents all operational guidance in Chinese, and there is no indication that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the policy rule for language or locale constraints, forcing a specific language without user opt-in is a natural-language policy concern.
