Security audit
Security checks for vulnerabilities and agentic risk
This skill is a bounded iterative-loop helper that writes a local state file and does not show hidden execution, credential access, network use, or destructive behavior.
Install only if you want a Chinese-documented loop controller for iterative tasks. Set a clear max iteration count, choose state-file locations intentionally, and review or delete loop-state.json when it may contain sensitive project information.
The skill instructions and examples are presented entirely in Chinese, which can constitute a language-policy issue when a specific language is effectively imposed without user opt-in. The file does not indicate that the skill is region-specific or offer an alternative language path, so the locale constraint is not clearly justified.
This code file contains its primary natural-language documentation, usage guidance, and user-facing descriptions entirely in Chinese. Under the policy, forcing a specific language without user opt-in or a documented regional justification is a natural-language policy violation.
This markdown file describes creating and updating a persistent state file containing task name, iteration history, summaries, artifacts, and metadata, but it does not provide a user-facing warning about potential storage of sensitive project information on disk. Because SQP-2 applies to markdown files when behaviors could affect user data or privacy, the persistence behavior should be explicitly disclosed as a caution rather than only described operationally.
This markdown file contains all instructional content in a single language and does not indicate that users may choose another language or that the skill is intentionally region-specific. Under the policy rule, forcing one language without opt-in is a natural-language policy concern.
The JSON template sets the default task name to the Chinese string "任务名称". Because this file is a general template rather than a clearly region-specific artifact, hard-coding a single language can conflict with language/locale policy expectations when no user opt-in or alternative is indicated.
No suspicious patterns detected.
