Security audit
Security checks for vulnerabilities and agentic risk
This is a simple batch-processing guidance skill with disclosed command access and no bundled code, network behavior, or hidden persistence.
Use this skill deliberately for batch tasks, especially when commands or file changes are involved. Review any generated shell commands and require explicit confirmation for deletions or bulk modifications; expect the missing referenced strategy/error files to limit guidance depth.
The description switches into Chinese for core capability, scenario, and trigger text, but the file does not state that the skill is Chinese-only or offer an English/localized alternative. This can impose a language preference on users without opt-in, which matches the language/locale policy violation criteria.
The trigger keywords listed for this skill are extremely generic terms such as 'items', 'progress', 'batch', 'multiple', and 'process'. In an agent platform that auto-selects skills based on keyword matching, this can cause the skill to activate for many ordinary requests and unnecessarily grant access to its declared 'exec' capability, increasing the chance of unintended command execution paths or destructive batch operations.
No suspicious patterns detected.
