Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed markdown-only ecommerce listing-writing assistant with no code execution, persistence, credential use, or account access.
This skill is reasonable to install if you want Chinese-oriented ecommerce listing drafts. Review generated copy before publishing, verify current marketplace rules, and avoid entering account credentials, API keys, customer personal data, or trade secrets.
The manifest sets language: zh-CN, while the skill otherwise supports multilingual behavior and even includes English trigger examples. This creates a natural-language locale policy concern because it fixes a specific language/locale without clear user opt-in or a documented region-specific justification.
This markdown file is natural-language guidance, and it consistently instructs users only in Chinese. Under the policy rule for language or locale constraints, forcing a specific language without user opt-in can exclude users and violates the requirement unless the restriction is explicitly justified.
The checklist is written entirely in Chinese, including the title and all user-facing instructions, with no indication that language selection is optional. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is clearly documented and justified.
This markdown states that a perfect score requires '全中文' and Chinese trigger words, and marks mixed-language behavior as insufficient. That is a natural-language locale policy constraint that appears mandatory rather than optional, with no indication that users may choose another language.
These lines prescribe specific output languages based on marketplace locale rather than offering language selection or explicit opt-in. Under the policy, forcing a language or locale without user choice can be a natural-language policy violation unless the constraint is clearly documented and justified as region-specific behavior.
