Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward local file converter that runs common conversion tools and writes converted files locally.
Install only the converters you need, review conversion commands for the intended input and output paths, and avoid running bulk or overwrite-prone conversions on important directories without backups.
The manifest description and primary instructional content are written in Chinese, while the skill title is in English and there is no indication that the skill is intentionally region-specific or that users can choose their preferred language. This creates a natural-language locale constraint without opt-in.
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
# Debian/Ubuntu
sudo apt install ffmpeg imagemagick libreoffice pandoc calibre
# macOS
brew install ffmpeg imagemagick libreoffice pandoc
The script includes user-facing comments and console messages in Chinese, such as the error text at L15, with no indication that the skill is region-specific or that users can opt into another language. This creates a natural-language locale policy issue because it imposes a specific language by default.
This markdown skill description says it will execute conversion commands and return a result file path, but it does not clearly warn users that the process creates output files on disk. Because this skill affects user data and filesystem state, the description should disclose that behavior so users understand files will be written locally.
No suspicious patterns detected.