Security audit
Security checks for vulnerabilities and agentic risk
This is a Markdown-only Chinese contract review helper whose sensitive document handling is disclosed and aligned with its purpose.
Install this only for Chinese-language or PRC-oriented contract review support, and avoid sending contracts you are not authorized to process. For high-value or legally complex agreements, have qualified counsel verify the results.
The skill description is written as a Chinese-only experience and does not indicate that users may choose another language or locale. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern unless the locale restriction is explicitly justified.
The trigger list contains broad natural-language phrases such as “帮我看看这份合同” and “这份合同有没有坑”, which can match casual conversation and cause the skill to activate when the user did not explicitly request a formal contract review workflow. In a document-processing skill, unintended invocation can expose uploaded files or user text to deeper parsing and reference-file access than necessary, creating privacy, routing, and least-privilege concerns.
The entire skill reference is written only in Chinese and does not state that Chinese is optional, user-selected, or required for a specific regional/legal context. Under the language/locale policy rule, forcing a single language without opt-in can be a natural-language policy concern.
The entire file is written in Chinese and is tailored to PRC legal materials, with no indication that language or locale is optional or selectable by the user. Under the policy, forcing a specific language/locale without opt-in is a natural-language policy violation unless the locale constraint is clearly documented and justified.
The text explicitly states '仲裁语言为中文', which imposes a specific language requirement in natural language content. Because the document does not present this as optional or explain a region-specific compliance necessity, it may conflict with the language/locale choice policy.
The entire markdown file is written in Chinese and provides no indication that language selection is optional or that the content is intentionally limited to a specific locale or jurisdiction. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be a locale-policy issue.
No suspicious patterns detected.
