Security audit
Security checks for vulnerabilities and agentic risk
This Chinese Markdown editing skill is narrowly scoped and disclosed, but users should know it edits the target file directly before showing a diff.
Install this if you want an agent to polish Chinese Markdown files for AI-like phrasing. Because it writes changes directly before showing the diff, use it on files you can review or restore, such as files under version control.
The skill explicitly states it will directly modify the user-specified file and only show a diff afterward, which means destructive changes can occur before the user has a chance to review or approve them. In a file-editing skill, this creates a real safety issue because an incorrect rewrite, path mistake, or overbroad edit could alter important content without informed consent.
The natural-language description repeatedly constrains the skill to Chinese content and Chinese stylistic norms, but it does not present this as an opt-in language choice or clearly justify it as a locale-specific tool. Under SQP-3, forcing a specific language without user opt-in can be a policy violation.
