Security audit
Security checks for vulnerabilities and agentic risk
This is a documentation-only academic manuscript diagnostic skill with visible Chinese-language behavior and no hidden execution, credential access, exfiltration, or destructive action.
Before installing, understand that this skill is designed for Chinese-language academic method-section diagnostics and may need packaging cleanup if the referenced positive-example path or local textbook PDF is unavailable. Do not run the Windows junction setup snippet unless you intentionally maintain that exact local reference directory.
This markdown skill file presents the skill’s purpose in Chinese only, which effectively forces a specific language/locale for users who invoke or read the skill. The policy allows locale constraints only when users are given a choice or the restriction is clearly justified as region-specific, neither of which is stated here.
The skill embeds operational instructions to create or recreate a filesystem junction, which exceeds the stated purpose of manuscript diagnostics and introduces unnecessary filesystem-manipulation capability. Even if presented as setup documentation, normalizing path and junction operations inside skill content increases the chance an agent will attempt local environment changes or expose host-specific filesystem details.
The fixed output format and operating constraints are entirely specified in Chinese and require the diagnostic report to follow that Chinese template. This creates a natural-language policy issue because the skill mandates a single language for outputs without stating that users may select another language or that the limitation is justified by a region-specific use case.
Line L425 states '本 Skill 仅诊断，不改写', which asserts outputs should only locate problems and give suggestions without rewriting. Yet the fixed output template includes multiple ready-to-use sentence formulations and rewrite patterns for the manuscript, which goes beyond pure diagnosis and contradicts the stated non-rewriting constraint.
The checklist explicitly recommends limitation wording that minimizes perceived problems (e.g., 'slightly,' 'minor,' 'negligible,' 'acceptable'), which can bias users toward downplaying genuine methodological weaknesses. In a skill meant to diagnose logical and methodological issues in psychology papers, this guidance undermines honest risk/limitation reporting and may systematically produce overly favorable assessments.
The file’s headings and guidance are entirely in Chinese, indicating a fixed language/locale for the skill content. Under the policy, forcing a specific language without user opt-in or documented justification is a natural-language policy violation.
Suspicious Unicode normalization or mixed-script content
The file’s headings and explanatory content are entirely in Chinese, while the quoted source material is in English and there is no indication that Chinese is optional or that the skill is intentionally limited to a Chinese-language audience. Under the policy for natural-language violations, forcing a specific language without user opt-in is in scope.
The title and the entire rubric are written in Chinese, which effectively fixes the skill content to a single language. Under the policy, a language restriction should either be optional for the user or clearly justified as region-specific; neither is stated here.
This markdown file contains user-facing instructional content and headings in Chinese, but it does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking context. Under the policy rule for language or locale, forcing a specific language without user opt-in can be a natural-language policy violation.
This markdown file presents the skill content exclusively in Chinese, including headings and explanatory bullets, with no indication that users can opt into another language. Under the policy rule for natural-language violations, forcing a specific language without user choice can be a locale-policy issue.
The markdown content is entirely written in Chinese, including headings and guidance, with no indication that the skill is region-specific or that users may choose another language. Under the language/locale policy rule, mandating a single language without opt-in can be a natural-language policy violation.
The markdown content is entirely presented in Chinese, including headings and explanatory guidance, with no indication that the user can choose another language or that the skill is intended only for a Chinese-language audience. Under the policy rule for natural-language constraints, this can constitute a language/locale restriction that is not explicitly justified or made optional.
The file’s headings and instructional framing are entirely in Chinese, but there is no indication that the user can choose language or that the skill is explicitly limited to a Chinese-language context. Under the policy, forcing a specific language without opt-in can be a natural-language policy violation.
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
## 原文片段
To ensure that our results were not limited to a specific analytic approach, we also analyzed each weekly measure with a type III repeated-measures ANOVA. Notably, this technique is quite different from our second-order latent growth models. Using the afex package in R (Singmann et al., 2019), we computed ... We extracted latent intercepts and slopes from the second-order latent growth models and tested for effects of condition by predicting latent slopes from latent intercepts (to control for regression to the mean) and condition (dummy coded with the extraversion-then-introversion group set to 1 and the introversion-then-extraversion group set to 0).
## 来源文献
The document is primarily written in Chinese while containing English source text, with no indication that users may choose another language or locale. Under the policy rule for natural-language constraints, this can be considered a language preference enforced without opt-in.
This markdown file presents its instructional framing in Chinese while embedding the source passage in English, but it does not state that the skill or reference content is multilingual by design or offer any language selection. Under the policy check for language or locale constraints, this can be read as imposing language behavior without explicit user choice or justification.
This markdown file contains user-facing instructional content only in Chinese, including headings and explanatory text, with no indication that the user can choose another language. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern unless the locale constraint is explicitly documented and justified.
The document is presented entirely in Chinese, including headings and guidance text, while embedding an English source quote. This creates a natural-language locale constraint without any indication that users may choose another language or that the file is intended only for a Chinese-specific context.
This markdown file includes natural-language content saying mothers needed sufficient knowledge of the Dutch language to understand study information and instructions. Under the policy rule, a language constraint can be a violation when it imposes a specific language without opt-in or an explicit justification that the skill is region-specific.
No suspicious patterns detected.