Security audit
Security checks for vulnerabilities and agentic risk
This skill is a focused WeChat Moments writing assistant that stores user-provided writing samples locally for personalization, with no code execution or network behavior found.
Install this only if you are comfortable with the skill keeping your provided posts and approved drafts in its local reference files for future style matching. Review or delete those reference files if you do not want older writing samples reused.
The skill advertises ongoing accumulation of past writing style but provides no upfront warning about storage, retention duration, or reuse of that content. Users may share personal or identifying text expecting ephemeral assistance, while the system is designed to retain it for future generations.
The feature's purpose is personalization, but it normalizes indefinite accumulation of user content and inferred style data for future reuse, which is a genuine privacy and retention risk. Even without malicious intent, the context makes this more dangerous because a writing-style corpus can reveal identity, habits, relationships, and sensitive life events over time.
The skill explicitly instructs the agent to immediately persist user-provided reference materials to disk without first obtaining consent for that specific save action or presenting any privacy notice. Because the content is personal writing intended to model the user's style, this creates a real data-retention risk and may store sensitive personal information unexpectedly.
This is a true retention vulnerability because the skill mandates automatic storage of user writing samples into a persistent reference library without per-item confirmation. In context, the stored data is likely to contain personal experiences, emotional reflections, and social details, increasing privacy exposure if reused, accessed unexpectedly, or retained longer than intended.
The markdown content presents the skill behavior entirely in Chinese and does not indicate any user language selection or opt-in. This may violate a language/locale policy if the broader environment expects language choice rather than a forced locale.
No suspicious patterns detected.
