Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed goal-execution workflow with broad but purpose-aligned tool use and confirmation controls.
Install this if you want a Chinese-language goal-execution assistant that can keep a progress ledger and, if you opt in, resume by heartbeat. Before using it, choose the ledger path deliberately and keep the default strict confirmation mode unless you are comfortable pre-authorizing the listed write or external actions.
The trigger list includes the very broad everyday term “死磕”, which can be invoked in ordinary conversation unrelated to this skill. Because this skill is user-invocable and designed for persistent, tool-using execution, accidental activation could cause unintended planning, file operations, web searches, or workflow persistence to begin in contexts where the user did not intend to launch the skill.
The natural-language instructions governing the skill are entirely in Chinese, while the skill is marked user-invocable and does not state that it is limited to Chinese-speaking users or offer a language-selection option. That creates a language policy concern because the operational behavior is effectively constrained to a specific language without user opt-in or justification.
The file documents capabilities including '文件读写' and '代码执行' and instructs performing minimal validation calls, but it does not include any warning to users that these actions may modify files or run commands in the environment. For markdown files, the rule requires warnings when described behavior could affect user data or system integrity.
This markdown file presents all operational instructions and task descriptions exclusively in Chinese, and nowhere indicates that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
This markdown file presents all headings, instructions, and task labels exclusively in Chinese. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly documented and justified, which is not present here.
The requirement explicitly says the ledger should be automatically read and written after a path is agreed, without per-round confirmation. That creates a persistent file modification behavior that can surprise users, overwrite existing content, or normalize unattended writes across iterations and heartbeats, especially in a skill designed for relentless multi-step execution.
This markdown template mandates a single language for all headings and usage instructions, but does not indicate that Chinese is optional or required for a region-specific purpose. That can violate language/locale policy because users who do not opt into Chinese are forced into one locale.
No suspicious patterns detected.
