Security audit
Security checks for vulnerabilities and agentic risk
This skill is a documentation helper for PRDs and optional HTML feature explainers, with no code execution, persistence, credential access, or hidden high-impact behavior.
Installers should know this skill may produce Chinese-language HTML explainers unless the user or agent adapts the output language, but the artifact shows no suspicious system access or unsafe execution behavior.
The skill explicitly instructs the agent to always emit a Chinese-language self-contained HTML document, regardless of the user's language or locale. This can override user expectations, cause misleading or unusable output for non-Chinese-speaking users, and create compliance/accessibility issues when language selection is not user-driven or justified by documented context.
The manifest description includes both English and Chinese text, which introduces a language-specific behavior without indicating user opt-in or choice. Under the policy rule, language or locale constraints should be explicitly optional or justified.
