Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese-language simulated space-login demo with local Python scripts and no evident hidden, persistent, network, or destructive behavior.
Install this only if a Chinese-language toy/demo space-login skill is useful to you. It appears low risk, but it does not perform real authentication or space operations and its interface is not localized beyond Chinese.
The user-facing documentation is entirely in Chinese, including headings, usage guidance, and the warning text. Under the policy for natural-language violations, this is a locale/language constraint without any explicit opt-in or justification that the skill is intended only for Chinese-speaking users.
The entire skill documentation, examples, headings, and user-facing guidance are written only in Chinese, with no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking context. This creates a natural-language locale restriction that is not presented as optional or justified.
Suspicious Unicode normalization or mixed-script content
Suspicious Unicode normalization or mixed-script content
This Python file contains user-facing docstrings, CLI descriptions, prompts, and output messages exclusively in Chinese. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation unless the constraint is clearly documented and justified.
This JSON config contains multiple default user-facing values in Chinese, including the space center and emergency contact fields. For a general-purpose skill, hard-coding a specific language/locale without opt-in can violate language/locale policy requirements.
This Python file presents its docstring, comments, and all user-facing print output in Chinese, with no indication that the user can choose another language or opt in to this locale. The rule for natural-language policy violations applies to all file types and covers forcing a specific language without user choice.
No suspicious patterns detected.
