Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent Chinese K12 teacher homework-tracking skill with scoped recordkeeping, consent checks, deletion controls, and no executable or hidden behavior found.
Install this for Chinese-speaking teacher workflows where homework progress and error patterns may be stored in the platform workspace. Before using it outside mainland China or in student-facing settings, localize crisis resources, curriculum assumptions, and consent rules; use aliases and confirm teacher consent before sharing or writing persistent records.
This markdown skill file presents all instructions and templates only in Chinese, which can amount to forcing a specific language/locale on users without documented opt-in. The policy allows locale constraints when the skill offers a language choice or clearly documents a justified region-specific limitation, neither of which appears here.
The document is entirely written in Chinese and presents operational guidance for skills without offering any language/locale choice or stating that the skill is region-specific. This can amount to a language-policy violation because it implicitly fixes the interaction context to a specific language for all users.
Line L11 instructs the skill to "用一句话说明原因" and even provides the rationale wording in Chinese, which creates a language-policy constraint in the skill guidance. Because the file does not offer any language choice or indicate that the locale restriction is user-selected or region-specific, this is a natural-language policy concern.
The file hard-codes the library's default scope to mainland China Chinese K12 use and says deployments to other regions should not be used directly for students until localization work is done. In a skill that handles student/teacher records and safety-related guidance, this creates a real risk of mislocalized crisis contacts, age/consent assumptions, and curriculum/legal guidance being applied without explicit user choice or runtime region checks.
This markdown template imposes a specific language/locale throughout the skill content, and there is no indication that the user can opt into another language or that the skill is intentionally restricted to a Chinese-language context. Under the policy, forcing a language without user opt-in is a natural-language policy concern.
No suspicious patterns detected.
