Security audit
Security checks for vulnerabilities and agentic risk
This skill is a document-review assistant for China-based event budgets and does not include code, hidden execution, persistence, or unrelated data access.
Before installing, users should understand that this skill is intended for Chinese event-budget review and may handle sensitive commercial prices, supplier quotes, and internal negotiation limits. Provide only documents you are comfortable having the agent analyze, and keep confidential project details out of external searches unless they are sanitized.
The default prompt invokes the skill in a very general way ('逐行审核这份活动预算') without clear trigger boundaries, input expectations, or limitations on when the skill should be used. Broad invocation phrasing can cause the agent to apply the skill to loosely related financial documents or untrusted content, increasing the chance of overreach, misclassification, or unsafe downstream automation decisions.
This markdown file presents all instructions and rule text exclusively in Chinese, and there is no indication that users may choose another language or that the skill is intended only for a Chinese-language audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The entire skill is written as a Chinese-only negotiation playbook and provides no indication that language choice is optional or limited to a justified region-specific use case. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
The title and all reporting instructions are written as mandatory Chinese-language output guidance, and there is no indication that users may choose another language. Under the policy criteria, forcing a specific language without opt-in is a natural-language locale violation unless clearly justified as region-specific.
No suspicious patterns detected.
