Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed local formatter for WeChat Official Account articles and does not show hidden, privileged, network, or persistent behavior.
Install this if you want a local WeChat article-formatting helper. Expect it to create an HTML file and include a browser copy button; choose or review the output filename to avoid overwriting work, and review generated article text before pasting into WeChat.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
</head>
<body>
<!-- 导航栏：多篇文章时复制此段，修改 data-target -->
<nav class="nav-bar">
<a data-target="content1" class="active">第1篇</a>
<!-- <a data-target="content2">第2篇</a> -->
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
</head>
<body>
<!-- 导航栏:多篇文章时复制此段,修改 data-target -->
<nav class="nav-bar">
<a data-target="content1" class="active">第1篇</a>
<!-- <a data-target="content2">第2篇</a> -->
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<!-- 导航栏：多篇文章时复制此段，修改 data-target -->
<nav class="nav-bar">
<a data-target="content1" class="active">第1篇</a>
<!-- <a data-target="content2">第2篇</a> -->
<button class="copy-btn" onclick="copyArticle('content1', this)">📋 复制此篇全文</button>
</nav>
The HTML root sets lang="zh-CN", and the visible UI text throughout the template is exclusively in Chinese, which indicates a fixed language/locale choice. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly documented and justified, which is not present in this file.
The description is bilingual but frames the skill around WeChat Official Account publishing and Chinese-language公众号 workflows as the default experience. Because the file does not explicitly offer language or locale choice or state that Chinese output is optional, this can be read as a locale-specific default without user opt-in.
In this markdown skill description, Step 5 explicitly tells the agent to save an HTML file to the user's working directory. That is a file-writing operation that can affect user data or workspace contents, but the documentation does not include any warning, confirmation expectation, or overwrite precaution.
No suspicious patterns detected.