Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent project workflow installer with disclosed local file creation and optional Feishu/Meegle synchronization, but users should review the sync behavior before enabling it.
Before installing, confirm that adding persistent CLAUDE.md/seazenai.md and .seazenai workflow prompts to the repository is acceptable. If enabling Feishu/Meegle integration, treat requirement titles, background, acceptance summaries, task names, statuses, defects, and optional user mappings as data that may be sent to or changed in that external project system; set auto_sync to false if you want manual control.
The skill automatically syncs requirement content to a third-party service without an explicit privacy or data-transfer warning at the point of use. Requirements documents may contain sensitive business context, internal decisions, or personal data, so silent external transmission materially increases confidentiality and compliance risk.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
# 测试任务索引入口
## 待测试（开发完成，CP4 待审）
| 需求编号（日期-简要描述） | 标题 | 开发完成日期 | 涉及模块 | 风险等级 |
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
# 测试任务索引入口
## 待测试（开发完成，CP4 待审）
| 需求编号（日期-简要描述） | 标题 | 开发完成日期 | 涉及模块 | 风险等级 |
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
# 测试任务索引入口
## 待测试（开发完成，CP4 待审）
| 需求编号（日期-简要描述） | 标题 | 开发完成日期 | 涉及模块 | 风险等级 |
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
# 测试任务索引入口
## 待测试（开发完成，CP4 待审）
| 需求编号（日期-简要描述） | 标题 | 开发完成日期 | 涉及模块 | 风险等级 |
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
# 测试任务索引入口
## 待测试（开发完成，CP4 待审）
| 需求编号（日期-简要描述） | 标题 | 开发完成日期 | 涉及模块 | 风险等级 |
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
# 测试任务索引入口
## 待测试（开发完成，CP4 待审）
| 需求编号（日期-简要描述） | 标题 | 开发完成日期 | 涉及模块 | 风险等级 |
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
# 测试任务索引入口
## 待测试（开发完成，CP4 待审）
| 需求编号（日期-简要描述） | 标题 | 开发完成日期 | 涉及模块 | 风险等级 |
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
# 测试任务索引入口
## 待测试（开发完成，CP4 待审）
| 需求编号（日期-简要描述） | 标题 | 开发完成日期 | 涉及模块 | 风险等级 |
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
# 测试任务索引入口
## 待测试（开发完成，CP4 待审）
| 需求编号（日期-简要描述） | 标题 | 开发完成日期 | 涉及模块 | 风险等级 |
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
# 测试任务索引入口
## 待测试（开发完成，CP4 待审）
| 需求编号（日期-简要描述） | 标题 | 开发完成日期 | 涉及模块 | 风险等级 |
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
# 测试任务索引入口
## 待测试（开发完成，CP4 待审）
| 需求编号（日期-简要描述） | 标题 | 开发完成日期 | 涉及模块 | 风险等级 |
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
# 测试任务索引入口
## 待测试（开发完成，CP4 待审）
| 需求编号（日期-简要描述） | 标题 | 开发完成日期 | 涉及模块 | 风险等级 |
The skill description and all prescribed user-facing interaction text are in Chinese, and the instructions present fixed Chinese responses and trigger phrases without any opt-in or language selection. Under the language/locale policy, a skill should not force a specific language unless it offers a user choice or clearly documents a justified regional constraint.
The trigger phrases for entering guide mode include very broad everyday language such as '下一步' and '现在该做什么', which can cause unintended activation. In an agentic context, accidental mode switching can lead to unexpected file reads, state inspection, or workflow actions the user did not specifically request.
The skill is presented as a guidance/orchestration installer, but it also expands into configuring external Feishu/Meegle integration and enabling automatic status synchronization. That broadens its effective privilege and data-flow scope beyond the declared role, increasing the chance that users authorize external project queries and status updates without realizing the operational and privacy implications.
The skill encourages enabling automatic Feishu project synchronization but does not warn users that project names, work-item metadata, workflow states, and possibly role mappings may be transmitted to an external service. This lack of disclosure undermines informed consent and can create privacy, compliance, or data-governance issues in enterprise environments.
The skill adds capabilities to search project spaces, inspect work-item metadata, and look up users in an external system even though its stated role is only installation, guidance, and updates. This violates least-privilege expectations for a setup assistant and can expose organizational metadata or user identifiers unnecessarily.
This markdown file is written as an operational skill/reference document entirely in Chinese and presents prompts and interaction flows in Chinese only. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly documented and justified, which is not present here.
This markdown file presents all operational instructions exclusively in Chinese, which can violate a language/locale policy when no user opt-in or alternative language is provided. The document does not state that it is intended only for a Chinese-speaking or region-specific audience.
The entire skill is written as a Chinese-language persona and workflow, with no indication that users may choose another language. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified.
The skill instructs the agent to automatically inspect multiple workspace files immediately on load, before obtaining explicit user consent or warning that filesystem access will occur. This can cause unintended disclosure of project metadata, task status, or sensitive repository structure in environments where users do not expect startup-time file reads.
The document is written entirely in Chinese and presents itself as a normative style specification for AI-generated frontend pages, but it does not indicate that Chinese is optional, user-selected, or required for a specific regional context. Under the language/locale policy, forcing a specific language without opt-in or justification is a natural-language policy concern.
The document title and core instruction text are entirely in Chinese and state that AI coding 'must comply' with this convention, which imposes a specific language/locale on generated guidance without any user opt-in. The file does not explain that the skill is intended only for Chinese-language teams or offer an alternative language choice.
The file title and normative text are written entirely in Chinese and state that AI coding must follow this specification, which effectively imposes a specific language/locale on the skill behavior. The policy for this audit requires flagging language or locale constraints when they are forced without explicit user opt-in or documented region-specific justification.
No suspicious patterns detected.