Security audit
Security checks for vulnerabilities and agentic risk
This is a manual English-writing review skill with disclosed style guidance and no code execution, persistence, credential access, or external data flow.
Installers should expect this skill to rewrite and critique English text, usually with Chinese explanations and an en-US default unless the user asks otherwise. For sensitive documents, review the rewritten text for meaning, tone, and required locale before sending it.
Automatically enabling Chinese explanations based on inferred user profile uses sensitive trait inference to alter behavior without explicit consent. This can lead to privacy issues, mistaken profiling, and unexpected disclosure of assumptions about the user's background or language identity.
The skill silently defaults to en-US when the user does not specify a language variant, which can override user preference without consent. This is a scope/quality issue rather than a direct security exploit, but it can cause incorrect output, locale mismatch, or user confusion in contexts where en-GB or another variant is expected.
The skill explicitly states it will switch explanation language when Chinese-user traits are detected, confirming behavior based on inferred identity rather than user choice. This increases privacy and profiling risk and may produce inappropriate or exclusionary behavior if the inference is wrong.
The file states that the principle of business email is to make the reader understand within 5 seconds and prescribes a direct style as the expected norm. This imposes a specific communication style and language expectation without offering user choice or noting that tone preferences may vary by audience or locale.
The description states that the skill covers English writing standards for academic papers and reports, which imposes a specific language constraint. Under the policy, forcing a language or locale without user opt-in or clear justification is a natural-language policy violation.
Line L03 states that the document defines English writing style rules for business scenarios. This imposes a specific language preference in natural language without offering users a language or locale choice, which matches the language-policy violation criteria.
This markdown file presents the skill entirely in Chinese, including headings, review criteria, and rewrite guidance, with no indication that users may choose another language. The policy category applies to natural-language locale constraints, and this file does not document a justified region-specific limitation or opt-in.
No suspicious patterns detected.
