Security audit
Security checks for vulnerabilities and agentic risk
This skill is a small RMB amount-to-Chinese-uppercase converter with no evidence of hidden access, persistence, network use, or unsafe behavior.
Install only if you need Chinese RMB uppercase amount formatting. The skill appears locally scoped and low risk, but users should understand that its interface and output are Chinese/RMB-specific.
The declared purpose claims a specific functional capability: converting numeric amounts to uppercase RMB strings. However, the supplied code does not implement that behavior at all; it is effectively empty. This is a material mismatch in primary purpose because the code does not perform the described function, nor any related supporting logic.
The file's natural-language description and usage instructions are presented only in Chinese, which imposes a specific language on users without any opt-in or alternative. The policy allows locale constraints only when explicitly offered as a choice or clearly justified as region-specific, neither of which is stated here.
This manifest contains user-facing natural language only in Chinese, which can force a specific language/locale experience without user opt-in. The file does not indicate that the skill is intentionally region-specific or that users may choose another language.
The manifest description "人民币大写转换工具" indicates a locale-specific behavior centered on Chinese RMB formatting, but the file does not state that this is limited to Chinese-language or China-specific use cases, nor does it mention user opt-in for the locale constraint. Under the policy for natural-language violations, forcing a specific language or locale without explicit choice or justification should be flagged.
No suspicious patterns detected.
