Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple Chinese ecommerce copywriting prompt with no hidden execution, data access, persistence, or privilege requests.
Install this when you want help drafting Chinese ecommerce copy for Taobao, JD, or Pinduoduo. Review generated marketing claims for platform rules, advertising-law compliance, and factual accuracy before publishing.
The file states "中文优化: 符合中国电商风格" as a fixed behavior, and the skill is consistently framed as producing Chinese ecommerce copy. This can constitute a language/locale policy issue because it imposes a specific language/locale behavior without clearly offering user choice or opt-in.
This markdown file includes trigger-style usage examples such as "帮我写..." that are very common, generic user requests. Although the description narrows the domain somewhat, the activation phrasing does not clearly define boundaries or exclusions, which could cause unintended invocation when users casually ask for writing help.
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
permit persons to whom the Software is furnished to do so.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE
FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
No suspicious patterns detected.