Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent Chinese-language business planning skill with markdown templates, no executable code, and no hidden persistence or credential handling.
Installers should treat this as a planning and market-research assistant. It may ask for commercially sensitive context and may use web search for competitor analysis, so provide only information you are comfortable using for advisory planning and verify monetization estimates independently.
The natural-language content, trigger phrases, workflow, and usage examples are all presented only in Chinese, which effectively enforces a language/locale without opt-in. The file does not state that the skill is intentionally limited to Chinese-speaking users or provide an alternative language option.
The trigger conditions include a broad catch-all phrase covering general topics like knowledge-system building, course design, IP positioning, and content planning. This can cause the skill to activate in contexts where the user did not explicitly request it, leading to inappropriate routing, over-collection of user/business information, or interference with other more suitable skills. In this business-planning context, the risk is operational rather than directly exploitative, but broad activation still increases the chance of unintended actions.
No suspicious patterns detected.
