Security audit
Security checks for vulnerabilities and agentic risk
This Chinese-language courseware skill is coherent and purpose-aligned, with no hidden code, network access, credential use, or persistence beyond expected file output.
Install this if you want a Chinese-language courseware generator that creates files from bundled templates. Before use, specify the desired output format and save location, and review generated files before sharing them.
The trigger list is very broad and includes generic phrases like '生成课件', '创建课件', and especially 'meta-skill-system', without any activation constraints or confirmation requirements. This increases the chance the skill is invoked in unintended contexts, causing the agent to follow file-reading and file-output behaviors when the user did not explicitly request this specific capability.
The skill instructs the agent to save generated content as files and later says to report file location/opening method, but it provides no warning, consent gate, or precondition for writing to disk. In an agentic environment, silent file creation can lead to unintended data persistence, clutter, overwriting, or misuse of local/workspace storage when the user only expected inline content.
The entire skill specification is written as a Chinese-only requirements checklist, including mandated labels, formats, and content structure, with no indication that users may choose another language. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified.
This markdown file presents all instructions, labels, and user guidance exclusively in Chinese. Under the policy rules, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly justified, which is not stated here.
The entire skill file is written exclusively in Chinese and does not indicate that users may choose another language or locale. Under the policy rule, a fixed language without opt-in can be a natural-language policy violation unless explicitly documented and justified.
This markdown template is entirely authored in Chinese and does not indicate that users may choose another language. Under the policy criteria, forcing a specific language without user opt-in is a natural-language policy concern.
This markdown template is entirely written in Chinese and does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-language context. Under the language/locale policy, forcing a specific language without user opt-in can be a natural-language policy issue.
This markdown file consists entirely of Chinese-language instructions and examples, with no indication that users may choose another language or that the skill is specifically intended for a Chinese-only audience. Under the policy rule for language or locale constraints, forcing a specific language without user opt-in can be a natural-language policy issue.
This markdown template appears to require Chinese as the interaction language through all headings, instructions, and examples. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is explicitly documented and justified.
This markdown template presents all instructions and examples exclusively in Chinese, and there is no natural-language note offering alternative languages or documenting that the skill is intentionally limited to Chinese-speaking users. Under the policy rule, forcing a specific language without user opt-in can be a locale/language policy violation.
No suspicious patterns detected.
