Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese Bazi astrology reference skill that asks for birth details to produce a chart, with no code execution, persistence, or external data transfer found.
Installers should understand that the skill asks for personal birth details and produces traditional astrology-style guidance. Treat outputs as cultural or entertainment-oriented, and do not rely on it for medical, legal, or investment decisions.
The trigger description is broad enough to activate on generic phrasing about life direction, trends, or personal advice, causing the skill to engage outside a clearly delimited astrology context. This can lead to unintended collection of sensitive personal data such as birth date, time, sex, and location, and may crowd out safer or more appropriate assistant behavior for ambiguous requests.
The entire instruction file is written as a prescriptive Chinese output framework and does not mention any option for the user to choose another language or locale. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy concern unless the locale restriction is explicitly documented and justified.
The entire skill file is written in Chinese and presents its guidance only in that language, without indicating any user language choice or opt-in. Under the stated policy, forcing a specific language without user choice can be a natural-language policy violation unless the locale constraint is clearly documented and justified.
The text requires a specific Chinese '老先生口吻' style and says that, when enabled, outputs should use that register and avoid exposing reasoning. While activation is limited to cases where the user explicitly asks for that persona, the file does not offer broader language or locale choice within the skill content itself. This is a mild natural-language policy concern because it constrains output style/language rather than offering alternatives.
This markdown file presents all instructions and reference material exclusively in Chinese, with no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
This markdown file presents all user-facing content in a single language, and there is no indication that the user can opt into another language or that the skill is intentionally region-specific. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
No suspicious patterns detected.
