Security audit
Security checks for vulnerabilities and agentic risk
This is a markdown-only I Ching divination skill with disclosed cultural and entertainment framing and no executable, network, credential, or persistence behavior.
Install this if you want cultural or entertainment-style I Ching readings. Treat outputs as reflective guidance, not as medical, legal, financial, or safety-critical advice, and ask for English-only or bilingual output if the Chinese terminology is hard to follow.
The trigger description is overly broad because it includes catch-all phrasing such as activating on any 'fortune-telling or divination-related queries.' This can cause unintended invocation on loosely related user requests, leading to context hijacking, wrong-skill activation, or unnecessary exposure of the skill’s behavioral instructions when a narrower skill should handle the request.
The output format mandates Chinese structural elements and terminology without checking the user's language preference. While not a classic security flaw, this can degrade user comprehension and create unsafe misunderstandings if users rely on the output for consequential advice but cannot fully understand the response.
This markdown file includes substantial Chinese text alongside English glosses throughout, but does not indicate whether the skill is intended only for Chinese-capable users or provide any language/locale opt-in. Under the policy rule for language or locale constraints, content that effectively assumes a specific language without documented choice can be a natural-language policy issue.
This markdown file applies to SQP-3, and the content presents methods such as 文字起卦 based on Chinese character stroke counts and uses Chinese-language labels throughout. Because it implicitly assumes a Chinese linguistic/cultural context without explicitly offering user opt-in or documenting the locale limitation, it may violate the language/locale policy criterion.
