Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese K12 Cornell-notes skill whose note storage, cross-skill summaries, and reminder handoff are disclosed and scoped to its study-notes purpose.
Install this only for its intended Chinese K12 study-notes context. Before enabling long-term profiles or reminders, confirm profile, cross-skill sharing, parent/guardian, and reminder consent settings are configured; review the self-test reminder template so it cannot override the main session-only recall-status rule.
The skill description includes broad trigger phrases such as '提炼今天学的内容' and '康奈尔笔记怎么做', which can plausibly match ordinary study conversation outside a clear note-organizing intent. This can cause unintended activation, leading to unnecessary access to note content, profile state, or cross-skill workflows when the user did not explicitly request this skill.
This markdown file presents all instructions, examples, and operational guidance only in Chinese, and it does not indicate that the user can select another language or that the skill is intentionally restricted to a Chinese-speaking audience. That can violate language/locale policy when a skill effectively forces one language without user opt-in.
The guide introduces a structured self-test training record format and an IM reminder field that imply storing recall-performance data beyond the current conversation. This conflicts with the stated skill scope that self-test recall status is only used in-session and that reminders require explicit user consent, creating a real risk of over-collection and retention of student learning data.
The policy requires flagging natural-language cases that force a specific language or locale without user opt-in. This protocol is entirely Chinese-language and does not indicate that Chinese is optional, user-selected, or required for a documented region-specific deployment.
L11 明确说明本库按“中国大陆的中文 K12 场景”设计，示例与话术为简体中文，安全求助渠道默认中国大陆。这属于自然语言层面的语言/地域默认约束；虽然 L13-L17 提到跨地区部署前需本地化，但未体现运行时的用户选择或明确 opt-in。
The document defines the repository-wide vocabulary entirely in Chinese and states it is the only allowed source for terminology and enums. This imposes a specific language standard without any opt-in, alternative locale, or justification that the skill is region-specific, which matches the language/locale policy violation criteria.
The line '需要IM提醒的' operationalizes reminders without embedding the manifest's required consent condition. In a student-facing skill, this can normalize sending or tracking reminders absent explicit approval, leading to unauthorized outreach or expectation mismatches around messaging behavior.
No suspicious patterns detected.
