Security audit
Security checks for vulnerabilities and agentic risk
This skill is a transparent Chinese-language AI news aggregation workflow with expected web research behavior and no code execution, persistence, credential access, or destructive actions.
Install if you want a Chinese-first AI news roundup assistant that performs multiple web searches and cites sources. Users who need another output language or a narrower regional focus should state that preference when invoking it.
The display name, description, and default prompt are all written in Chinese and describe producing a Chinese-style '今日头条' output, with no indication that the user can choose another language. This may violate language/locale policy if the skill imposes a specific language without explicit user choice or justification.
The manifest's default prompt says to use "$ai-news-toutiao 生成今日 AI 头条榜单" but does not clearly define activation constraints, negative examples, or the exact trigger scope. In a manifest file, this can create ambiguity about when the skill should be invoked versus ordinary discussion about AI news.
This markdown file contains natural-language instructions and content exclusively in Chinese, which can impose a language/locale constraint on users without opt-in. The policy allows locale constraints when clearly documented and justified, but no such justification or language choice appears here.
The file states 输出语言：中文 as a default behavior. Under the policy rule, forcing a specific language without an explicit user choice or opt-in is a natural-language locale policy issue, and this document does not mention any option to switch languages.
This file is largely written in Chinese, but many required search templates are fixed in English, such as the newsletter, funding, research, and policy queries. Because the skill does not state that the user should opt into English-language sourcing or that the task is intentionally bilingual, it may impose a language/locale bias without user choice.
The document is primarily written in Chinese and presents the resource list in that locale without any stated user opt-in or language choice. The policy requires flagging language or locale constraints when they are imposed without an explicit option or justification.
No suspicious patterns detected.
