Security audit
Security checks for vulnerabilities and agentic risk
This is a markdown-only coding methodology skill that guides code decomposition and generation, with no hidden execution, persistence, credential use, or destructive behavior found.
Install this if you want a Chinese-language template for decomposing complex features into small methods and code structure. Review the generated code yourself, especially authentication examples, because the skill provides methodology templates and does not enforce secure implementation practices.
The trigger phrases listed for this skill are very broad and overlap heavily with ordinary programming requests such as code generation, decomposition, and method structure. That makes accidental or unsolicited activation more likely, which can hijack normal request routing and cause the agent to apply this skill in contexts where it was not explicitly intended.
The skill is written entirely in Chinese and presents behavior in a way that implies Chinese-language operation without offering language negotiation or documenting a justified locale restriction. This can cause user intent mismatches, misunderstandings of safety-relevant instructions, and degraded oversight if the surrounding system or user operates in another language.
The file title and execution protocol are written as mandatory Chinese-language instructions, and there is no indication that users may choose another language or locale. This can violate language/locale policy when a skill effectively constrains interaction to a specific language without explicit opt-in or justification.
This markdown file is entirely written in Chinese and does not indicate that the user may choose another language or that the Chinese-only requirement is justified by a region-specific need. Under the stated policy, a skill that imposes a specific language without opt-in can be a natural-language policy violation.
This markdown file contains user-facing instructional content exclusively in Chinese, and there is no indication that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking context. Under the language/locale policy, forcing a specific language without opt-in is a natural-language policy concern.
The document title and all usage instructions are written exclusively in Chinese, presenting the template library as Chinese-only guidance. Under the policy criteria, a skill artifact that forces a specific language without user opt-in or a documented regional justification is a natural-language policy concern.
This markdown file contains user-facing natural-language instructions exclusively in Chinese, and there is no indication that users may select another language or that the skill is intentionally limited to a Chinese-speaking context. Under the policy rule for language or locale constraints, forcing a single language without opt-in is a natural-language policy concern.
This markdown file contains user-facing instructional content exclusively in Chinese, and there is no indication that users may choose another language or that the skill is intentionally limited to a Chinese-only audience. Under the policy rule for natural-language constraints, forcing a single language without opt-in can be a locale policy violation.
This markdown file includes examples for validatePassword and authenticateUser, which imply collecting and processing user passwords, but it provides no warning about handling sensitive credentials or protecting user data. Under the markdown-specific warning rule, descriptions involving privacy-sensitive behaviour should disclose such risks or expectations.
This markdown file presents all instructions, examples, and outputs only in Chinese, which can amount to a language/locale constraint without explicit user choice. The policy for SQP-3 asks to flag cases where a specific language is effectively forced without opt-in or documented justification.
No suspicious patterns detected.
