Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed deep-research/report-writing skill that uses available research tools and produces Markdown reports, with no evidence of hidden execution, persistence, credential access, or exfiltration.
Before installing, expect this skill to perform external research and create Markdown report files for analysis-style requests. Use explicit wording if you only want a short answer or no web research.
The skill’s trigger scope is broad enough to activate on many ordinary requests for 'analysis' or 'research,' which can cause unintended routing into a heavyweight workflow with mandatory file generation and web/tool usage. In an agent setting, this increases the chance of over-collection, unnecessary external access, and confusing behavior when the user did not ask for deep research.
The English trigger phrases include generic formulations like 'quick analysis of' and 'comprehensive analysis of,' which are common in normal assistant interactions and may spuriously invoke this skill. Because the skill then directs the agent toward multi-source retrieval and mandatory Markdown artifact delivery, accidental activation can expand data exposure and tool usage beyond user expectations.
This markdown file contains user-facing natural-language content exclusively in Chinese, including the title, headings, body text, and closing prompt. Under the policy rule for language/locale constraints, forcing a specific language without opt-in or justification can violate organizational language-choice expectations.
This markdown file contains user-facing natural language entirely in Chinese, including the title, headings, and all instructions, but it does not indicate that Chinese is optional or that the skill is intended only for a Chinese-speaking audience. Under the language/locale policy, forcing a specific language without user opt-in can be a policy violation.
This markdown file contains user-facing natural language entirely in Chinese, including the title, headings, recommendations, and follow-up options. Under the policy, forcing a specific language without user opt-in can be a locale-policy violation unless the restriction is clearly documented and justified.
技能清单描述明确强调“必须输出 Markdown（.md）文件，并提供下载地址或可直接打开的文件入口”，而该参考文件在后续处理部分主动扩展到 Word、PDF、PPT、HTML、Excel 等格式。对于一个以深度研究和 Markdown 交付为核心的技能，这体现出交付行为与描述存在轻微偏移。
This markdown file is natural-language content, so language-policy checks apply. The title, headings, body text, and closing note consistently require Chinese reading ability, and there is no indication that users can request another language or that the report is intended only for a China-specific audience as a documented constraint.
No suspicious patterns detected.
