Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Chinese K12 chemistry-teaching skill with scoped classroom data use and no executable or hidden install behavior.
Install this for Chinese-language chemistry classroom workflows where teachers review outputs before use. Do not deploy it directly to students outside mainland China unless crisis contacts, curriculum alignment, legal defaults, and language expectations are localized first.
The schema note is written to mandate Chinese-language field usage and references Chinese-only documentation and terminology, which indicates a fixed language/locale expectation. Under the policy, forcing a specific language without offering choice or documenting a justified region-specific scope is a natural-language policy violation.
This file contains user-facing operational instructions only in Chinese, with no statement that the language is region-specific or that another language can be selected. Under the language/locale policy, forcing a specific language without user opt-in is a natural-language policy concern.
This file contains user-facing instructional policy text exclusively in Chinese, but it does not indicate that Chinese is optional or that the skill is limited to a Chinese-language context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The file hard-codes a China-mainland K12 locale as the default operating context and warns against direct student use elsewhere unless operators localize emergency contacts, curriculum alignment, and legal defaults. This is not overtly malicious, but it can still create a safety and compliance vulnerability if the skill is deployed in other regions without explicit user locale detection or opt-in, leading to wrong crisis resources, age-of-consent assumptions, or educational guidance.
The description lists trigger examples such as “过关卡怎么设计”, which is broad and not tightly anchored to chemistry notation drills. A generic request about designing a pass card could overlap with many unrelated teaching-planning situations and may cause unintended invocation despite the later scope exclusions.
No suspicious patterns detected.
