Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Chinese-language compliance checklist helper with no executable code, persistence, credential access, or data exfiltration behavior.
This appears safe to install as a general checklist aid. Users should treat its outputs as non-legal guidance, verify licensing and regulatory requirements with local authorities or qualified counsel, and be aware that broad compliance prompts may activate it even when a narrower legal workflow is intended.
The trigger phrases are broad, generic requests such as '合规检查' and '行业合规', which can match ordinary user queries and cause the skill to activate outside a clearly intended scope. Over-broad activation increases the chance of misrouting user requests, unexpected invocation, and unreviewed compliance-style guidance being presented when a different tool or narrower workflow was intended.
All user-facing metadata, examples, and operating instructions are presented exclusively in Chinese, and the skill does not state that users may choose another language. This can be a language/locale policy issue when a skill implicitly forces one language without user opt-in or explicit justification.
No suspicious patterns detected.
