Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed local report citation formatter, with a caution that its legacy mode can overwrite the input report file.
Use the documented --output form so the original stitched.md remains intact, and keep a backup if using the legacy compatibility mode that overwrites --report. Install only if a Chinese-language local citation-rendering workflow fits your use case.
声明描述只涵盖了引用去重、编号转换和追加参考文献，这确实是代码的一部分核心功能；但代码还实现了多项未声明的重要文档渲染与修复能力。尤其是当传入 --outline 时，会自动插入 L0 摘要框并生成 TOC，这已超出单纯“脚注后处理”的范围。另有 claim.id 泄漏自动修复、citations.json 导出以及更丰富的结构化结果输出。虽然主线仍与终稿后处理相关，但声明未准确反映这些实质性附加能力，因此应判定为描述与实际行为不完全一致。
Without declared permissions the skill's intent is opaque and cannot be validated.
The compatibility mode explicitly allows in-place overwrite of the input report file, which creates a real integrity risk because users may unintentionally destroy original content or lose recoverability if the transformation is wrong. In an automated pipeline, this can silently propagate corrupted or partially rewritten reports, especially when the mode is triggered without a prominent warning or backup requirement.
This code file contains natural-language instructions, CLI help text, and result messages that are presented only in Chinese. That imposes a specific language/locale on users without any visible opt-in or alternative, which matches the policy’s language-choice concern.
No suspicious patterns detected.
