Security audit
Security checks for vulnerabilities and agentic risk
This is a simple toy space-login simulator with no evidence of hidden access, persistence, networking, or destructive behavior.
Install only if you are comfortable with a Chinese-language toy simulator. It does not appear to access accounts or real space services; the documented SPACE_API_KEY example is not used by the code inspected.
This markdown file appears to force a specific language for all user-facing instructions and examples. Under the policy, language constraints should either offer user opt-in/choice or be clearly documented as region-specific and justified.
This config uses Chinese-language strings for key operational values such as the space center and emergency contact. Because the file provides no indication that the skill is region-specific or that users can choose their locale, it may violate the policy against forcing a specific language without opt-in.
Suspicious Unicode normalization or mixed-script content
The file’s docstring, comments, and all user-facing print messages are written in Chinese, which imposes a specific language on users without any opt-in or alternative. The policy explicitly flags language or locale constraints when they are forced rather than selectable or justified.
Suspicious Unicode normalization or mixed-script content
The module docstring presents the skill name and purpose exclusively in Chinese, and the rest of the user-facing CLI/help text follows the same pattern. This imposes a specific language on users without any opt-in or justification, matching the language/locale policy violation criteria.
No suspicious patterns detected.
