Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward QJZD Nav CLI reference for managing links, categories, and tags, with expected but potentially destructive delete commands.
Install only if you intend agents to manage QJZD Nav content through qjzd-nav. Treat delete and category reorganization commands as irreversible unless your deployment documents recovery; list objects first, confirm IDs, and use backups or a non-production environment for bulk changes.
The skill documents direct deletion commands for links without any warning about destructive effects, recovery limitations, or the need to verify the target ID before execution. In an agent skill context, this increases the chance of accidental data loss because an automated or inattentive operator may execute the example as-is against production content.
The category deletion section is more dangerous than a simple object delete because it can trigger broader content changes, including moving links to parent/default locations when using mode options. Without a clear warning, users or agents may cause unintended reorganization or loss of expected information architecture in addition to deleting the category itself.
The tag deletion example omits any warning that removing a tag can affect classification, automation, filtering, and user navigation behavior across linked content. In a content-management CLI skill, that omission makes accidental destructive changes more likely, especially when an agent may follow concise examples directly.
No suspicious patterns detected.
