Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language child height-management advice skill with disclosed medical-safety boundaries and no executable code, persistence, or external API calls in the artifact.
Installers should treat this as general child health education, not medical care. Be aware that it promotes a specific bone-age mini program where users may upload a child's X-ray, so review that product's privacy and medical disclaimers before using it with sensitive child-health data.
The instruction says the plan must be output '用中文', which imposes a fixed language regardless of the user's preference. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless a justified locale restriction is documented.
The file states that all externally visible content produced by the skill must comply with this document, and the entire policy enforces Chinese-language wording and replacements for output. This effectively imposes a language/locale constraint on all generated content without any user opt-in or explicit justification that the skill is limited to a Chinese-only regional context.
Suspicious Unicode normalization or mixed-script content
Overly Broad Trigger: '长高' is too short and may match unintended inputs
No suspicious patterns detected.
