Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed, Markdown-only video planning and generation skill with minor usability cautions around broad triggers and file output.
Installers should expect this skill to guide video scripts or related generated files in Chinese by default. Confirm where files will be written before letting an agent save output, and be aware that the unusual 'meta-skill-system' trigger may be broader than necessary.
The trigger list includes very broad, generic phrases such as '生成视频', '创建视频', and especially 'meta-skill-system', which can cause the skill to activate in contexts the user did not clearly intend. Over-broad activation increases the chance of incorrect routing, prompt hijacking via accidental invocation, or the model following this skill's file-writing instructions during unrelated requests.
This markdown file is entirely framed as a Chinese-language template, with section titles, task goals, execution steps, and output examples all specified in Chinese. Because the file provides no opt-in, alternative language handling, or justification that the skill is region-specific, it can violate a language/locale policy requiring user choice rather than forced language defaults.
In the teaching-video example, the narration requirement specifies "标准普通话" and a fixed speaking format as the expected output. This imposes a specific language/locale choice in natural-language instructions without user opt-in or a documented region-specific justification.
The entire template is written in Chinese and presents task goals, steps, and output examples only in Chinese, with no indication that users may choose another language. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
The entire skill reference is written only in Chinese, with no indication that users may choose another language or that the skill is intentionally limited to a Chinese-language or region-specific context. Under the stated policy, a language or locale restriction without opt-in or justification is a natural-language policy concern.
The document title and core instruction are entirely in Chinese and explicitly direct the workflow in that language context, but there is no indication that users may choose another language or that the skill is intended only for a Chinese-language environment. This creates a natural-language locale policy concern because the file effectively fixes the interaction/output language without opt-in.
The skill instructs the agent to save generated content as files and report file locations, but it does not require explicit user consent, destination confirmation, or a warning that file creation will occur. In an agent environment with write capabilities, this can lead to unexpected filesystem changes, accidental overwrites, or creation of artifacts the user did not intend to persist.
The entire template is written as a Chinese-only skill exemplar and does not indicate that users may choose another language or locale. Under the policy rule for language/locale constraints, this can be treated as a natural-language policy issue when no opt-in or justification is provided.
This markdown file contains natural-language instructions and examples exclusively in Chinese, which can amount to a language/locale policy constraint if users are not given an opt-in or alternative language option. The file does not state that it is intended only for a Chinese-language or region-specific workflow, nor does it offer language selection.
