Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Chinese-language promotion profit calculator that reads bundled reference notes and optionally processes a user-provided CSV, with no evidence of hidden access, persistence, network use, or destructive behavior.
Install this if you want a Chinese-language promotion-profit calculator. Review any estimated default costs before relying on the output for business decisions, and only pass CSV files you intend the calculator to read.
The skill instructs reading local reference files such as references/platform-fees.md and references/cost-structure.md, but it declares no explicit tool scope or permissions. This creates an authorization ambiguity where an agent may access files without a least-privilege boundary, increasing the risk of unintended local file access if the skill is invoked in a broader environment.
The invocation logic mixes specific analytical use cases with a catch-all keyword list, making it unclear when the skill should activate. This ambiguity raises the chance of accidental activation in routine commerce discussions, which can lead to unintended file reads, estimated data substitution, and unnecessary script execution.
The trigger list includes broad business terms like 'ROI', '定价', and '活动方案', which can match many unrelated conversations and cause over-invocation of the skill. Over-broad routing is dangerous because it may cause the agent to read files, apply defaults, or run local scripts in contexts where the user did not intend to perform promotion-profit analysis.
This code file contains natural-language strings and documentation entirely in Chinese, including usage text and later user-facing output, but nowhere indicates that the tool is intended only for Chinese-speaking users or provides an opt-in language choice. Under the locale policy rule, forcing a specific language without user choice is a policy concern.
