Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent product-video scripting skill with disclosed video-handoff behavior and no evidence of hidden execution, persistence, credential access, or exfiltration.
Installers should expect this skill to guide product-video scripts and, after explicit approval, hand product images and script details to a video-generation tool. Non-Chinese users may want localization changes before use.
The description says to use this skill whenever the user wants various kinds of product content ideas or wants to choose among multiple directions, mixing specific phrases with broad intent-based triggers. Because it does not define what should not trigger the skill or provide negative examples, it could overlap with ordinary requests for marketing help and cause unintended invocation.
The default prompt includes several Chinese phrases as the user-facing option set, but the file does not indicate that the skill is intended only for Chinese-speaking users or provide an opt-in language choice. This can violate language/locale policy by implicitly forcing a specific language in the interaction.
The template hard-codes Chinese text for campaign fallback output, which can force a specific language regardless of the user's preferred locale. This is a natural-language policy concern because the file does not offer a language choice or document a justified locale restriction.
The file requires several user-facing labels and options in Chinese, including direction names and later action choices. Because this is framed as a default output template and does not provide a language-selection mechanism, it imposes a specific locale on all users.
The template requires exact Chinese trigger/selection phrases such as 直接生成视频 and related options. These are user-facing instructions and are not accompanied by any language-choice mechanism, so they force a specific language without user opt-in.
The handoff requires fixed Chinese prompt lines such as 请基于这张产品参考图... and additional required Chinese constraint lines, making the workflow language-specific by default. This is a natural-language policy concern because the file does not offer an explicit language choice or state that the workflow is limited to a Chinese-only regional context.
The file repeatedly establishes a strict no-text/no-subtitles policy for generated videos, but the regeneration guidance later suggests using 'more restrained text overlay.' That contradiction can cause downstream agents or tools to reintroduce on-screen text against the intended safety and product constraints, leading to policy drift and inconsistent outputs.
This line mandates a Chinese fallback sentence when research is not possible. Even though it is only one string, it still enforces a language choice without opt-in or a documented region-specific justification.
The instruction says that if prior tasks used another campaign or language, a clean project/session should be recommended before generation. While operationally understandable, it treats language as a workflow constraint without clarifying whether the skill is region-specific or whether the user can choose the target language.
No suspicious patterns detected.
