Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese copywriting helper with templates and optional file output; its behavior is disclosed and aligned with that purpose.
Install only if you want a Chinese-language copywriting workflow. When using it, explicitly choose whether you want inline text or a saved file, specify the destination filename, and review any generated HTML before opening or publishing it.
The trigger list includes very generic phrases such as '生成文案', '写文案', and especially 'meta-skill-system', which can match ordinary user conversation and unintentionally activate the skill. In an agent environment, overly broad activation increases the chance of misrouting benign requests into this skill's file-writing workflow, causing unintended behavior or outputs without clear user intent.
The manifest description and the full skill instructions are presented entirely in Chinese, and the skill does not indicate that users may choose another language or that it is intentionally limited to a Chinese-language/regional context. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
The skill explicitly instructs saving generated content as .txt, .docx, .pdf, or .html files but does not warn the user that data will be written to disk or require confirmation first. In an agent setting, silent file creation can overwrite user expectations, leak sensitive prompted content into local storage, or create risky HTML artifacts that may later be opened and rendered.
The title and core instruction are written as mandatory Chinese-language copywriting requirements, and nowhere in the document is there an option for the user to choose another language. Because SQP-3 applies to all file types and covers language/locale policy violations, this is a natural-language policy issue rather than a technical one.
This markdown file contains user-facing instructions exclusively in Chinese across the entire document. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can exclude users and constitutes a locale/language policy issue unless the restriction is explicitly justified.
This markdown file contains all task instructions and examples exclusively in Chinese, which can amount to a language policy constraint if users are not given an explicit opt-in or alternative locale. The file does not state that it is region-specific or that Chinese is an intentional, justified requirement.
This markdown file explicitly includes output-saving behaviors such as saving to .txt, .docx/.pdf, and .html files. Under the markdown-specific warning criterion, the description should warn users that the skill may create or overwrite files, but no such warning appears near the output steps or elsewhere in the document.
This markdown file provides all instructions, task goals, and examples only in Chinese. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale restriction is clearly documented and justified, which is not present here.
This markdown exemplar presents all instructions, headings, and examples exclusively in Chinese. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is clearly documented and justified, which is not present here.
This markdown exemplar presents all instructions, labels, and examples only in Chinese, which can amount to a language policy issue if the skill is expected to be generally usable across users without prior opt-in. The file does not mention that Chinese is required, optional, or limited to a China-specific workflow.
No suspicious patterns detected.
