Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed paid image-generation skill that sends prompts and optional user-provided reference images to WorkRally after user confirmation and payment authorization.
Install only if you are comfortable using WorkRally and WeixinPay for paid image generation. Each generation is disclosed as 0.36 yuan per call, requires user authorization, and may send your prompt plus any reference images you provide to WorkRally for processing.
The guidance fixes the error-response shape to use a Chinese msg field ("<中文消息>"), which reflects a specific language requirement in natural-language-facing content. The file does not indicate that this Chinese-only behavior is optional, user-selected, or justified as a region-specific constraint.
The instruction says on-image text should be placed in Chinese quotation marks, which imposes a specific locale/style requirement regardless of the user's preferred language or typography conventions. This is a natural-language policy concern because the file does not present this as optional or limited to Chinese-language requests.
L18 明确给出面向用户的固定中文提示“WorkRally图片生成 0.36 元/次，是否使用？”，整篇流程示例也默认中文交互。根据规则，若技能强制特定语言而未提供用户选择或明确的地域性理由，属于自然语言政策风险。
This markdown file presents all user-facing instructions and pricing details only in Chinese. Under the policy, forcing a specific language without user opt-in or a documented justification is a natural-language policy violation.
No suspicious patterns detected.
