Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Chinese K12 writing-teacher skill with sensitive student-record features, but its access and sharing controls are purpose-aligned and documented.
Install this only for Chinese-language K12 teaching workflows where the operator can follow the consent, pseudonym, deletion, and localization requirements. Avoid storing real names or unnecessary full essay text, and localize crisis contacts and privacy rules before using it outside mainland China.
The manifest description is entirely written to operate in Chinese and frames activation around fixed Chinese phrases, with no indication that users may choose another language or opt in to a Chinese-only experience. Under the policy rule, forcing a specific language without user choice is a natural-language policy concern unless the locale restriction is explicitly justified.
The file defines a long-term student profiling template that tracks writing traits over time and explicitly instructs teachers to retain supporting materials such as essay archives, interview records, class/grade linkage, and parent-sharing checks. Although it recommends pseudonyms, it lacks clear rules for minimizing collected data, storing re-identification mappings separately, access control, retention/deletion, and handling student/parent consent, which creates a realistic privacy risk for minors if used operationally.
The title and content are entirely in Chinese, indicating the skill artifact is intended to operate in a single language. There is no visible statement offering a language choice or documenting a justified locale restriction, which can violate language/locale policy requirements.
This markdown skill content forces a single language/locale in its natural-language instructions and examples, and it does not mention that the skill is intended only for Chinese-language users or offer an opt-in choice. Under the policy, language constraints should be documented and justified or left as a user choice.
The note is written as a normative instruction in Chinese and is tied to the distributed skill's scope, indicating an expected Chinese-language operating context. Because the file provides no language choice or explicit justification for requiring Chinese, it creates a locale/language policy concern under the rule for natural-language policy violations.
The description defines the workspace entirely in Chinese and specifies terminology rules such as using the shared vocabulary file, which effectively fixes the language/locale for use. Without an explicit opt-in or documented regional scope, this is a natural-language policy violation according to the stated criteria.
The entire skill content, including headings, tables, and operational guidance, is written only in Chinese, with no indication that users may choose another language or locale. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly justified.
The file’s operational instructions and policy text are entirely written in Chinese and include prescriptive guidance for all SKILLs, but there is no indication that users may choose another language or that the restriction is limited to a China-specific deployment. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The file hard-codes the skill library for China-mainland Chinese K12 use and states it should not be directly used for other regions without localization. This is not an exploit primitive, but it is a real safety and policy vulnerability because locale-specific educational standards, legal assumptions, and crisis-contact defaults can produce inappropriate or unsafe guidance if the deployment context differs and no user choice or runtime check is enforced.
The document establishes a repository-wide single source of truth for terms and references entirely in Chinese and requires all related files to use these definitions. This is a natural-language locale constraint, but the file does not indicate any user opt-in, alternative locale, or justification that the skill is explicitly region- or language-specific.
The file prohibits alternative synonymous labels and enforces one Chinese terminology set across outputs. Enforcing a single language/terminology standard can be a locale policy restriction, and here it is presented as mandatory without noting user choice or a documented region-specific rationale.
The naming section standardizes coordinator names, assessment types, and copyright status labels using Chinese terms only. Because this applies across the repository and does not mention optional localization or a clearly justified locale boundary, it constitutes a natural-language policy concern under the language/locale rule.
This markdown file contains user-facing instructions exclusively in Chinese, which can constitute a language/locale policy issue when no opt-in or alternative language is provided. The file does not indicate that the skill is region-specific or that Chinese is an intentional, documented constraint.
The file presents all instructions and labels in Chinese and does not indicate that the user can choose another language. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern unless the locale restriction is explicitly justified.
No suspicious patterns detected.
