Security audit
Security checks for vulnerabilities and agentic risk
This office automation skill is broadly useful but asks for command execution and automated email/report distribution without enough scoping or user-control safeguards.
Review this skill carefully before installing. Use it only in a constrained workspace, avoid giving it broad access to sensitive HR, finance, customer, or contract files, and require explicit review before any shell command, email send, cloud action, or report distribution.
The trigger keywords are extremely broad, including generic terms such as 'office', 'automation', '常见办公流程', and '数据整理'. This increases the chance the skill is invoked in unrelated contexts, exposing users to exec-capable behavior and bulk-processing actions when they did not intentionally select this skill.
The visible user-facing summary and the rest of the skill description are presented entirely in Chinese, with no indication that another language can be selected. For a general-purpose office automation skill, this constitutes a locale/language constraint that is not documented as optional or region-specific.
The manifest and description repeatedly claim the skill is safe, locally processed, and has removed risky code, yet the skill explicitly enables the exec tool. That creates a misleading trust signal that can cause users or reviewers to underestimate the risk of arbitrary command execution in a document- and email-handling workflow.
This skill declares unrestricted command execution for a broad office automation assistant handling documents, spreadsheets, email, and reports. In that context, exec can be abused to read sensitive files, invoke external tools, exfiltrate data, or perform destructive filesystem operations beyond what users reasonably expect from a generic office helper.
The skill advertises bulk email sending and automated distribution of reports, but the warnings and security notes do not clearly explain outbound data transmission, recipient verification, accidental disclosure, or audit requirements. In an office setting, that can lead to mass leakage of employee, customer, financial, or contractual information.
No suspicious patterns detected.
