Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Chinese document-analysis helper that reads user-provided documents or URLs and writes derived reports without bundled code or persistence.
Install this if you want a Chinese-language document summarization and comparison workflow. Be mindful when using it on private documents or login-protected webpages, since it may read that content through file, web, OCR, or browser tools and create reports in an output directory.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
---
name: deep-doc-processor
version: 1.1.0
description: "智能文档深度处理器。总结文档、提炼长文核心观点、生成结构化分析报告、对多份资料交叉对比"
All user-facing instructions, triggers, examples, and output guidance are presented only in Chinese, which effectively imposes a language choice on users. The file does not state that the skill is region-specific or provide an opt-in or alternative language path, so this appears to violate the language/locale policy criterion.
The auto-load trigger phrases are broad enough to match common, everyday requests such as '帮我看看', '分析', or '整理成文档', which can cause the skill to activate outside a clearly document-processing-specific context. This increases the chance of unintended tool use, unnecessary file or web access, and scope expansion without the user explicitly selecting this capability.
No suspicious patterns detected.