Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Chinese-language project planning skill with no executable code, persistence, credential handling, or hidden data access.
Install this if you want a Chinese-language project planning and task decomposition workflow. Be aware it may activate on broad planning phrases and may answer in Chinese unless your agent adapts language to the conversation.
The skill description contains very broad trigger phrases such as '帮我拆解任务', '做个项目计划', and '任务怎么分工', which can match a large share of ordinary planning-related prompts. In an agent environment, this can cause over-triggering and unintended routing, allowing the skill to intercept benign user requests and reshape the assistant's behavior even when the user did not explicitly ask for this workflow.
The skill metadata and content are Chinese-only and do not offer a user-language choice or justify a hard locale restriction. If auto-invoked for non-Chinese users, it may force output into an unexpected language, causing misunderstanding of planning decisions, constraints, or risk analysis and reducing user control over the interaction.
SQP-3 applies to all file types and covers language or locale policy violations. This markdown file begins with a Chinese title and all user-facing content is written in Chinese, but there is no indication that the skill is region-specific or that users can opt into another language.
Suspicious Unicode normalization or mixed-script content
This markdown file begins with and is primarily authored in Chinese, presenting the template as the default output format. Under the policy rule for language/locale, forcing a specific language without giving the user a choice can violate organizational language expectations.
No suspicious patterns detected.
