Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Chinese tender-proposal writing helper with no executable code, persistence, hidden privilege use, or deceptive behavior found.
Before installing, be aware that this skill is intended for Chinese tender/proposal workflows and may handle sensitive procurement files. Review generated bid content for accuracy and compliance, and only allow Feishu delivery when you intend to share the resulting document that way.
The skill description includes broad trigger phrases such as '投标', '标书', '技术方案', and '招标文件', which are common business terms and can easily appear in ordinary user conversations. This can cause unintended activation of the skill, leading it to process sensitive procurement documents or generate authoritative-seeming bidding content when the user did not explicitly intend to invoke it.
The description is written as a Chinese-language tender proposal generator and specifies generating a Word-format bid technical proposal, but it does not indicate that users can choose another language or that the Chinese locale is a justified constraint. This can violate language/locale policy because it appears to enforce a specific language without opt-in.
No suspicious patterns detected.
