Security audit
Security checks for vulnerabilities and agentic risk
This skill has no executable payload, but it explicitly plans youth ideological data collection and social-platform influence archiving without privacy or consent boundaries.
Review before installing. This skill should only be used if its social and youth data collection language is removed or constrained to lawful, consent-based, anonymized aggregate metrics with clear retention and platform-compliance limits. There is no evidence of malware or hidden code, but the proposed data practices are under-scoped.
The skill title and framing are presented in Chinese and the document does not state that users may choose another language or locale. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern unless the constraint is documented and justified.
The skill explicitly lists '10后思想数据采集' as an applicable scenario, which indicates collection of ideological/thought data from minors or youth cohorts. Collecting sensitive belief/ideological data, especially from young users, creates serious privacy, consent, profiling, and potential manipulation risks, and the advocacy/propagation context makes misuse more dangerous.
The archiving of 'global Z世代讨论数据' and 'TikTok挑战赛数据' into an '影响力库' supports systematic tracking of youth discourse and influence measurement. Even if sourced from public platforms, centralizing this data for influence analysis can enable profiling, microtargeting, and behavioral manipulation, particularly because the surrounding skill emphasizes narrative propagation and audience penetration.
No suspicious patterns detected.
