Security audit
Security checks for vulnerabilities and agentic risk
This skill is a Chinese-language conjecture-proof workflow with RH examples and a local numerical verifier; it overstates its breadth but does not show malicious or privileged behavior.
Install only if you want a Chinese-language proof-workflow template and RH-oriented example materials. Treat its generated mathematical claims as drafts requiring expert review, especially because the package itself marks the key RH inequality as still open and its broad domain claims are not backed by domain-specific implementations.
The skill materially overstates its capabilities, claiming a general-purpose multi-domain conjecture proving pipeline while the available implementation appears limited to a specific RH-oriented verification workflow. This can mislead users into relying on unsupported analysis, producing false confidence in proof-like outputs or reductions that were never actually performed.
The trigger list includes very broad terms such as conjecture/proof/reduction, which can cause the skill to activate in many ordinary discussions where the user did not intend to invoke this specialized behavior. Unintended activation can override more suitable handling, increase confusion, and route benign prompts into an overclaimed proof-generation workflow.
The primary description and operational guidance are written entirely in Chinese, and the skill does not state that users may choose another language or locale. This can constitute a language-policy issue if the skill implicitly constrains interaction language without offering opt-in or alternatives.
Suspicious Unicode normalization or mixed-script content
Suspicious Unicode normalization or mixed-script content
Suspicious Unicode normalization or mixed-script content
Suspicious Unicode normalization or mixed-script content
Suspicious Unicode normalization or mixed-script content
Suspicious Unicode normalization or mixed-script content
This markdown file presents all instructions, task labels, and workflow descriptions exclusively in Chinese. Under the language/locale policy rule, forcing a specific language without offering user opt-in or documenting a justified region-specific constraint is a natural-language policy concern.
Suspicious Unicode normalization or mixed-script content
SQP-3 applies to all file types and flags language or locale policy violations in natural-language content. Line L001 establishes a Chinese-only skill document, and nowhere in the file is there an opt-in, alternative language option, or a stated reason that the skill must operate only in Chinese.
Suspicious Unicode normalization or mixed-script content
This markdown file consists entirely of Chinese-language instructional content and does not indicate that users may choose another language or that the skill is intentionally limited to a Chinese-speaking audience. The policy requires flagging language or locale constraints when they are imposed without user opt-in or clear justification.
Suspicious Unicode normalization or mixed-script content
This code file contains natural-language instructions and usage text that force a specific language/locale for users. The policy allows locale constraints only when they are justified or when the user is offered a choice, neither of which is present here.
The comment says '数值导数 = h'×h, 公式给出 h'/h', but the code actually computes ratio_num = h_prime / h_val, i.e. the numerical estimate of h'/h. This is an active contradiction between the documentation and the implemented comparison logic in a mathematically central part of the verifier.
This markdown file is entirely written in Chinese and does not indicate that the language is optional, user-selected, or required for a specific regional/compliance reason. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
This markdown file contains user-facing natural-language content exclusively in Chinese, and there is no visible statement that the language is optional, selectable, or justified as a region-specific constraint. Under the language/locale policy rule, forcing a specific language without opt-in can be a policy concern.
This markdown file contains primary instructional and descriptive content in Chinese, while also including some English, but it does not state that the language is optional or limited to a specific audience. Under the policy rule for language or locale constraints, forcing a specific language without user opt-in can be a natural-language policy violation.
The title begins in Chinese and the document body is primarily written in Chinese, while also including an English subtitle. This imposes a specific language on the user without any stated choice, opt-in, or justification for a locale-specific audience.
SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all instructional content in a single language with no opt-in, alternative locale, or justification that the skill is region- or language-specific.
This SVG contains user-visible natural-language text entirely in Chinese, including the title, description, and labels. For a general-purpose skill asset, forcing a specific language without offering a choice or documenting a region-specific justification can violate language/locale policy requirements.
This file contains all user-visible labels and descriptions in Chinese, including the title, description, and diagram annotations. For a general-purpose skill asset, that is a natural-language locale constraint with no visible opt-in or justification in the file.
This SVG contains all user-facing text in Chinese, including the title, description, and explanatory labels. For a general-purpose asset, that imposes a specific language/locale without any visible opt-in or documented reason that the asset is region-specific.
No suspicious patterns detected.
