Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward academic paper search helper with expected web research behavior and only limited, user-directed Markdown file output.
Before installing, expect this skill to browse external academic/search sites for your research topic and optionally create a Markdown report if you give it a path. Provide non-sensitive research queries and use a clear workspace path for file output.
The manifest description specifies the skill behavior entirely in Chinese, which can amount to forcing a specific language or locale if the organization expects user choice. There is no accompanying statement that the skill can respond in the user's preferred language or that Chinese is an optional/default locale.
The skill instructs the agent to write Markdown output to a user-provided path, but it does not require an explicit confirmation that a filesystem modification will occur. While the write is limited to task output rather than arbitrary code execution, silent file creation or overwrite can still cause unintended modification of local files, especially if the path is ambiguous or sensitive.
No suspicious patterns detected.
