Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese-language code review skill with no bundled executable code or hidden persistent behavior, though its documented review script is not present in the artifact.
Before installing, be aware that the documentation is Chinese-only and the artifact references a Node review script that is not included here. If installation later downloads or exposes additional files, inspect that actual script before running it on private code.
The skill documentation is entirely in Chinese and does not indicate that other languages are supported for the user-facing instructions. This creates a natural-language policy concern because it effectively imposes a locale/language choice without opt-in or documented justification.
The manifest description and the main markdown content are written entirely in Chinese, which creates an implicit language requirement for users. The file does not mention that the skill is China-specific, nor does it offer an alternative language or user opt-in for locale/language preference.
No suspicious patterns detected.
