Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent Chinese-language Word document generation skill that mainly provides formatting guidance and creates a local .docx output file.
Install this if you want a Chinese-language assistant workflow for creating formatted Word documents. Before using it, choose the output filename and location explicitly, and review generated documents before sharing them, especially if they contain personal, business, or contractual content.
The trigger list includes very broad phrases such as common requests to create a Word document, which can cause the skill to activate in routine contexts without clear user intent. Over-broad activation increases the chance the agent will generate files or enter a file-writing workflow unexpectedly, which is a safety and scope-control issue rather than a code-execution flaw.
The skill instructs the agent to save output as a .docx file and later to tell the user the file location, but it does not require prior notice, confirmation, or a safe default save path. In an agent environment, silent file creation can surprise users, overwrite existing files, or place artifacts in unintended locations, especially because the skill frames file output as a normal final step.
The file title and core instruction text are entirely in Chinese and present the document-generation requirements as mandatory defaults, with no indication that users may choose another language or locale. This creates a natural-language locale policy issue because it effectively constrains the skill to a specific language without documented opt-in or a region-specific justification.
This markdown file presents all operational instructions and usage guidance exclusively in Chinese. Under the language/locale policy, forcing a specific language without user opt-in or a documented regional justification is a natural-language policy concern.
The document prescribes 黑体、宋体 and Chinese typographic size names such as 小二号、小三号、四号、小四号、五号 as fixed defaults. This is a locale-specific requirement expressed in natural language, but the file does not state that the skill is limited to Chinese-language documents or provide any user opt-in or alternative locale handling.
This markdown file is entirely presented in Chinese and does not indicate that users may choose another language or that the skill is intentionally restricted to a Chinese-language context. Under the natural-language policy category, forcing a specific language without user opt-in can be a locale-policy violation.
This file’s natural-language instructions and examples are fully Chinese-only, and there is no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
This file contains natural-language instructions and examples exclusively in Chinese, and nowhere indicates that the user can select another language or that the locale restriction is intentional. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
This markdown file instructs the skill to save output as a .docx file and choose a save location and filename, which is a user-data-affecting file write operation. The description does not include any warning about overwriting existing files, confirming the destination, or handling sensitive document contents.
No suspicious patterns detected.
