Security audit
Security checks for vulnerabilities and agentic risk
This skill searches a public cloud-drive index and discloses third-party link risks, with no hidden code, persistence, or local data access.
Before installing, be aware that searches may return third-party cloud-drive links that can be unsafe, expired, misleading, or legally restricted. Do not enter account credentials on unfamiliar pages, verify domains, and use it only for lawful content.
The trigger conditions are broad enough to match generic requests for cloud-drive or shared-resource searches, which can cause the skill to activate when the user did not specifically intend to use this source. In this skill's context, unintended invocation is more concerning because it directs users toward third-party shared-file indexes that may include infringing, unsafe, or misleading links.
The skill content, trigger phrases, formatting examples, and keyword guidance are all Chinese-specific, and there is no statement that users may interact in other languages or opt into Chinese output. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern unless the locale restriction is clearly documented and justified.
No suspicious patterns detected.
