Security audit
Security checks for vulnerabilities and agentic risk
This is mostly a network diagnostics skill, but it needs review because it can prompt active probing and requests write access without clear limits.
Install only if you intend to use it for authorized network troubleshooting. Before running scans or traces, confirm the target is yours or you have permission, and consider removing or restricting write access because the documented diagnostics do not clearly require it.
The skill advertises port scanning and network diagnostics but does not warn users that these actions may be sensitive, logged, rate-limited, or prohibited against systems they do not control. Because the skill has exec capability and provides ready-to-run probing commands, the missing warning increases the chance of unauthorized or disruptive use.
L042-L063 将技能描述为支持“创建/查询/修改/删除”“导入/重置/保存”等通用资源操作，这与同文件其余部分围绕 ping、traceroute、nc、dig 等诊断命令的定位相矛盾。这里不是简单的信息缺失，而是文档主动宣称了与实际技能意图不一致的操作语义，容易误导使用者对技能能力边界的理解。
The trigger condition is broad enough to activate on common troubleshooting requests, while the skill includes active probing actions such as ping, traceroute, and port checks via exec. In an agent context, over-broad routing can cause unintended network scanning or probing of third-party hosts without clear user confirmation, which creates operational and compliance risk.
The description explicitly says the skill strengthens Chinese localization, but there is no indication that users can choose another language or opt in to this locale preference. That creates a natural-language locale constraint without documented choice or justification.
L067-L105 的使用场景和命令示例都在对 api.example.com、example.com、target.host 等远端目标执行 ping、traceroute、dig 和端口探测；但 L224 又写明“本地运行，不支持远程诊断”。对于网络诊断技能而言，是否允许诊断远端主机是核心意图边界，这一表述会让用户混淆“本地执行”与“只能诊断本机”的区别。
