Security audit
Security checks for vulnerabilities and agentic risk
This is a local SRE self-check and reporting guide with optional JSON consistency checkers; I found no hidden persistence, credential use, or data-exfiltration behavior.
Install only if Chinese-language documentation and diagnostics are acceptable. Use it on SRE reports, logs, and summaries you are authorized to share, and treat its scripts as structure/consistency aids only, not proof of business correctness or independent validation.
声明描述的是一个较完整的自检/评估工具，面向 SRE 巡检脚本、定时工具、Agent 或人机协作，并涉及指标选择、数据缺口识别和 Markdown 报告生成。实际代码只是一个命令行脚本，读取单个 JSON 文件，检查 selfcheck 中 falsification_requirement、falsification_attempts 等字段的格式与记录完整性，然后输出 JSON 结果。代码注释和返回字段都明确说明“只检查记录完整性，不验证引用、否证有效性、适用性声明或业务正确性”。因此其主要目的与声明相比明显更窄且不同，属于实质性描述不符。
Without declared permissions the skill's intent is opaque and cannot be validated.
The manifest description and all user-facing instructions are written in Chinese, and the file does not indicate that another language can be used or that Chinese is optional. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
This markdown file presents all operational guidance and adjudication criteria exclusively in Chinese. Under the policy rule, forcing a specific language without user opt-in or a documented regional justification is a natural-language policy violation.
This markdown file is entirely written in Chinese and provides no indication that language choice is optional or that the skill is intentionally limited to a Chinese-speaking or region-specific context. Under the language/locale policy, a skill that effectively requires a specific language without opt-in or justification is a natural-language policy violation.
The file title and instructions are written in Chinese, and L03 explicitly says to use the user's language, but the skill content itself appears to prescribe Chinese-language operation without a documented opt-in or locale justification. This can violate language/locale policy when a skill effectively forces a specific language context by default.
The script emits multiple user-facing status and issue strings in Chinese, including diagnostic messages and the final notice, but provides no language selection or justification for a Chinese-only locale. This can violate language/locale policy expectations because users of the skill are required to consume one language without opt-in.
This markdown file contains user-facing instructional content exclusively in Chinese, and nowhere indicates that the skill is region-specific or that users may opt into another language. Under the policy rule for language/locale, forcing a single language without opt-in is a natural-language policy concern.
No suspicious patterns detected.
