Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Flutter architecture guide that may scaffold project folders when asked, with no evidence of hidden execution, data access, persistence, or exfiltration.
Before installing, expect this skill to guide Flutter MVVM architecture decisions and, when you explicitly ask for scaffolding, create project folders under lib/. Review the proposed module names and paths before letting it modify an existing project.
The description is written as a hard requirement in Chinese for the skill's usage context, with no indication that the user may choose another language or locale. The rule covers language or locale policy violations when a skill forces a specific language without opt-in.
The skill explicitly instructs the agent to create directories directly under lib/ when certain trigger phrases are used, but it does not require an explicit confirmation step or warn that it will modify the filesystem. In an agent context, that can cause unintended project changes, especially if a user is asking for architectural guidance rather than authorizing write operations.
The title and entire document are written as a prescriptive team standard in Chinese, and the file presents the conventions as mandatory rather than offering a language or locale option. Under the stated policy, forcing a specific language without opt-in can be a natural-language policy violation.
No suspicious patterns detected.
