Security audit
Security checks for vulnerabilities and agentic risk
This is a static Chinese-language tax lookup skill with no executable code, persistence, credential handling, or hidden install behavior.
Before installing, treat this as a quick-reference aid for Chinese-speaking cross-border sellers, not a tax professional. Verify rates, thresholds, deadlines, and any registration or filing actions with current local authority guidance or an accountant before acting.
The invocation examples and user-facing instructions are entirely in Chinese, and the document does not indicate that other languages are supported or that the user may choose their preferred language. This creates a natural-language policy concern because the skill appears to impose a specific language without user opt-in.
The skill name, description, triggers, and all user-facing examples are written exclusively in Chinese, and the file does not indicate that users may choose another language or that the Chinese-only scope is intentional and justified. Under the policy, language constraints should either be optional for the user or explicitly documented as a necessary locale-specific limitation.
The trigger phrases are broad enough to activate on common tax questions outside a narrow, well-scoped invocation path. Overbroad activation can cause the skill to intercept general financial or compliance queries, increasing the chance of users receiving jurisdiction-specific tax guidance inappropriately or without sufficient context, which is risky in a compliance domain.
The phrase '税务优化有什么建议' is especially broad and can draw in open-ended tax-planning requests well beyond the skill's stated scope. In a tax/compliance skill, such broad matching may lead to advice on tax minimization strategies without adequate jurisdictional qualification, increasing legal, compliance, and trust risk.
L211-L214 明确声明该技能不提供申报表填写服务，只做速查和引导；但 L162-L168 定义了给下游 Agent 的执行指令，如 REGISTER_OSS、APPLY_DE_VAT，语义上已从信息查询扩展到推动实际税务注册/申报流程。这种文档内部对技能意图的表述存在直接张力，容易让集成方误以为该技能可安全触发后续合规操作。
L212-L214 表示本技能不做精确税务计算，只提供参考信息；但 L257-L271 的示例中，技能把“月销 3 万美元”年化为“$36,000 ≈ €33,000”，并据此得出“✅ 触发”德国注册义务的结论。这不是单纯展示税率/门槛，而是实际进行了金额换算和义务判定，与前述边界说明相矛盾。
The schema includes "独立站" as one of the accepted sales channel values while the rest of the schema uses English labels. This imposes a specific language choice in part of the interface without any opt-in or documented locale rationale, which is a natural-language policy concern.
This manifest-style JSON contains user-facing text such as "高危风险" and "次月10日" in Chinese, and later recommendations/actions are also Chinese-only. Because the file provides no indication of user language selection or justified locale restriction, it appears to force a specific language without opt-in, which matches the language/locale policy concern.
The enum for taxHealthStatus is fixed to Chinese-language strings, which imposes a specific language on all consumers of this schema. Under the policy, locale or language constraints should be optional or clearly justified; this file provides no opt-in or documentation that the schema is intentionally Chinese-only.
This markdown skill reference presents all instructional and reference content exclusively in Chinese, which can amount to a language-policy violation when no user opt-in or alternative locale is provided. The file does not indicate that the skill is intentionally limited to Chinese-speaking users or a China-specific compliance context.
This is a manifest-type file, so vague trigger and policy checks apply. The enum for salesChannels mixes English values with the Chinese term "独立站" without any surrounding documentation or schema metadata explaining locale expectations, which can make matching and downstream invocation behavior ambiguous for users or systems expecting a single-language taxonomy.
