Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Chinese grammar coaching skill that uses consent-based learning profiles and does not include executable code or hidden network behavior.
Install this for its intended Chinese K12 grammar-coaching context. Before use outside Mainland China or Simplified Chinese settings, localize the curriculum assumptions, emergency contacts, and minor-consent rules. Profile tracking, parent sharing, cross-skill sharing, and reminders should remain opt-in and reviewed with the student or guardian as appropriate.
The manifest description is entirely prescriptive for Chinese grammar coaching and trigger phrases are only given in Chinese, implying the skill operates in a fixed language/locale. The file does not state that Chinese is optional, user-selected, or justified as a region-specific compliance constraint, so this is a natural-language language-policy issue.
The title and introductory scope explicitly define the skill content entirely in Chinese for a specific Chinese exam context, with no indication that users can opt into another language or locale. Under the policy, forcing a specific language without user choice is a natural-language policy concern unless clearly justified as region-specific.
L485 states that grade determination should rely on asking the user "你现在读几年级", which hard-codes a Chinese prompt. This is a natural-language locale restriction with no indication that the user may choose another language or that the constraint is optional.
The schema is explicitly distributed to a Chinese grammar tracker and all human-facing descriptive text in the metadata is written only in Chinese. This constitutes a locale/language constraint in natural-language content without any indication of user choice, opt-in, or a documented region-specific justification in this file.
The entire shared guidance file is written in Chinese and presents operational instructions only in that language, with no indication that users may choose another language or locale. Under the policy rule for natural-language violations, forcing a specific language without opt-in is in scope unless the locale restriction is explicitly documented and justified.
The document states that the library is designed for Mainland China Chinese K12 scenarios, with simplified Chinese phrasing and China-specific help channels as defaults. This is a natural-language locale constraint that applies by default rather than offering a user language/region choice or opt-in.
No suspicious patterns detected.
