Security audit
Security checks for vulnerabilities and agentic risk
This is a simple embedded-code migration checklist skill with no executable code, persistence, credential use, or hidden behavior.
Installers should understand this is a Chinese-language checklist/reporting aid for embedded code migration. Adding bilingual metadata and a narrower activation phrase would improve routing, but the current artifact does not show risky behavior.
The skill description '在将代码从一个平台迁移到另一个平台时使用' is broad and does not define clear activation triggers, exclusions, or scope boundaries. In an agent environment, overly broad activation can cause the skill to be invoked in inappropriate contexts, leading to irrelevant guidance, workflow confusion, or unintended handling of tasks outside embedded migration.
The description is written only in Chinese and does not declare a locale constraint or language fallback. In multilingual agent deployments, this can cause misrouting, incorrect invocation, or user misunderstanding, which weakens reliable skill selection and may result in the wrong workflow being applied.
No suspicious patterns detected.
