Security audit
Security checks for vulnerabilities and agentic risk
This is a markdown-only short-video script template skill with no executable code, credentials, persistence, or hidden data access.
Installers should expect this skill to produce Chinese-oriented short-video scripts and structured storyboard output. Review whether the broad trigger terms and Chinese templates match your intended use, but no security-sensitive authority was identified.
The trigger list includes generic terms like '视频脚本', '短视频文案', '分镜', 'storyboard', and 'video script', which are broad enough to match many ordinary creative-writing requests outside the intended scope. This can cause the skill to activate unexpectedly, intercept user intent, and route unrelated requests into downstream automated generation pipelines, increasing the chance of misuse or confusion.
The entire template is written in Chinese and presents fixed Chinese-language copy examples, with no indication that language choice is optional or that the skill is intentionally limited to a Chinese-speaking context. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation.
The entire template is written as a prescriptive content structure in Chinese, with example copy and instructions only in Chinese. This creates a natural-language locale constraint without offering users a language choice or documenting that the template is intentionally region-specific.
The skill’s natural-language description and instructions are presented in Chinese, and there is no indication that the user can choose another language or that the skill is intentionally limited to Chinese-language operation. This can violate a language-choice policy when locale restrictions are not explicitly justified or opt-in.
The file is entirely written as a Chinese-language template and does not indicate that language choice is optional or user-selectable. Under the stated policy, forcing a specific language without opt-in can be a natural-language policy violation unless the locale constraint is explicitly justified.
No suspicious patterns detected.
