Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed brand-valuation prompt with no evidence of hidden access, persistence, exfiltration, or unsafe installation behavior, though its valuation guidance may be incomplete.
Before relying on this skill, treat its output as an estimate rather than a formal valuation. Check the input assumptions, formulas, and missing V1 implementation, especially for financial or business decisions.
The skill content is written as mandatory Chinese-only instructions and does not offer a user language choice or document a valid locale restriction. This can exclude users, cause misinterpretation of financial outputs, and create prompt-steering behavior where the agent ignores the user's preferred language.
The skill title and core operating instructions are written as mandatory Chinese-language directions, including role and task framing, with no indication that the user can choose another language. This can violate language/locale policy when a skill implicitly requires a specific language without user opt-in.
The surrounding documentation describes a 'Dual-Engine Valuation' model with Engine A for cumulative media value (V1) and Engine B for transformation value (T). However, the Python snippet defines only calculate_transformation_value and contains no implementation for the V1 formula, which creates an active contradiction between the documented protocol and the code shown as the calculation logic.
No suspicious patterns detected.
