Security audit
Security checks for vulnerabilities and agentic risk
This skill performs disclosed historical data comparison on user-provided CSV or Excel files and does not show hidden networking, credential access, persistence, or destructive behavior.
Install this if you want a Chinese-language helper for historical spreadsheet comparison. Review spreadsheet contents before sharing them with an agent, and when using --output, provide a specific report path to avoid creating files in unintended locations.
The skill instructs use of a local script and supports writing output files, but it does not declare any explicit tool scope or permissions boundary. That mismatch can let an agent invoke file-writing behavior without clear authorization constraints, increasing the risk of unintended file creation or overwriting when handling user-supplied paths.
The manifest description and user-facing content are entirely written in Chinese and present the skill's behavior in that locale without indicating that other languages are supported or that the user can choose their preferred language. This can violate language/locale policy requirements when a skill implicitly enforces a specific language without user opt-in.
This code file contains natural-language strings that force a specific language for usage instructions and runtime output. Under the policy, a skill should not impose a language or locale without user opt-in unless the constraint is clearly documented and justified as region-specific.
SQP-3 applies to all file types and includes language or locale policy violations. This methodology reference presents all instructions and content exclusively in Chinese, with no indication that the user can choose another language or that the content is intentionally limited to a Chinese-speaking context.
No suspicious patterns detected.
