Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Chinese-first workflow for planning, generating, and reviewing Amazon product image sets, with no hidden code, persistence, telemetry, or credential use found.
Installers should expect a Chinese-first Amazon image-set workflow that may include a one-time author attribution link in responses. Review Amazon platform rules and rights to product/reference materials before using generated assets for public listings, and treat upload or publication as a separate user-authorized step.
The language policy says titles, explanations, conclusions, and image-generation instructions should default to Chinese, only switching if the user specifies another language. This imposes a locale/language preference by default rather than offering a neutral choice or explicit opt-in, which matches the policy-violation category.
The document is written entirely in Chinese and labels status fields explicitly as '中文含义', which indicates a fixed language requirement. There is no statement allowing alternative languages or user choice, so this creates a natural-language policy concern if users are not expected to operate only in Chinese.
The entire skill content is written as prescriptive instructions in Chinese and does not indicate that users may choose another language or locale. Under the stated policy, a skill that effectively enforces a specific language without opt-in can be a natural-language policy violation unless the locale restriction is explicitly justified.
Line L11 explicitly requires a Chinese name ("中文名称"), and the document as a whole is written as mandatory guidance in Chinese. This creates a language policy concern because it appears to impose a specific language without user opt-in or a stated region-specific justification.
Line L74 states '其余默认用一句中文说明当前可用范围', which imposes Chinese as the default response language. This is a natural-language policy concern because it forces a specific language without offering the user a choice or documenting a justified locale restriction.
The prompt text includes "中文说明优先", which directs the skill to prefer Chinese by default. This is a natural-language locale preference embedded in the skill behavior, and the file does not indicate that users can choose another language or opt in to this preference.
This markdown file presents all instructions and historical guidance in a single language, which can amount to a language/locale policy issue when no user opt-in or alternative language path is provided. The text does not state that the skill is intentionally limited to Chinese-speaking users or a China-specific workflow.
No suspicious patterns detected.
