Security audit
Security checks for vulnerabilities and agentic risk
This skill fetches public Sina Finance news and formats a Chinese daily report, with its scheduled memory-saving behavior disclosed and no hidden dangerous actions found.
Install this if you want a Chinese-language daily Sina Finance report. Review the optional cron example before enabling it, since it would run daily and save reports to memory, but the inspected artifacts do not show hidden credential access, privilege escalation, destructive actions, or exfiltration.
This markdown skill forces a specific language/locale experience for users by presenting the name, description, usage instructions, and operational guidance only in Chinese. The policy explicitly calls for flagging language or locale constraints when the skill does not provide user opt-in or a clearly documented justification.
The manifest description is written entirely in Chinese and describes the skill's behavior only in that locale, with no indication that users can select another language or output locale. Under the stated policy, language or locale constraints should either be optional for the user or clearly justified as region-specific.
This code file contains natural-language strings and documentation entirely in Chinese, including the script description and generated report content, with no indication that users may choose another language or locale. Under the policy rule for language/locale, this is a forced language behavior rather than an explicit opt-in or documented regional constraint.
No suspicious patterns detected.
