Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent Chinese parenting assistant concept, but it plans long-term child development records, family/social sharing, peer comparison, and retention/lock-in without clear privacy, consent, deletion, or sharing controls.
Review carefully before installing or publishing. The package is not executing code, but it should add clear controls for minors' data: parental consent, data minimization, optional recordkeeping, secure storage, explicit family-sharing permissions, export and deletion, retention limits, and warnings that developmental comparisons are informational rather than medical diagnosis.
The skill explicitly promotes maintaining a 3-year child growth archive, sharing it with family, and comparing a child against peers, but provides no privacy, consent, retention, or protection guidance. Because this concerns minors' longitudinal developmental data, the omission increases the risk of over-collection, unauthorized sharing, and unsafe handling of sensitive personal information.
The entire skill description is written in Chinese and presents the assistant as a Chinese-language parenting tool, but it does not state that this is a China-specific or Chinese-only skill nor offer any user language choice. Under the policy, forcing a specific language without opt-in can be a natural-language policy violation.
No suspicious patterns detected.
