Security audit
Security checks for vulnerabilities and agentic risk
This is a simple academic paper-search skill whose browser-based search behavior matches its stated purpose, with minor notice and trigger-scope improvements users should understand.
Install only if you are comfortable with a Chinese-language paper-search assistant using your research terms on external academic websites. Avoid entering confidential, unpublished, or personally sensitive research queries unless you intend them to be searched online.
The description, triggers, examples, and operating instructions are entirely in Chinese, and the skill does not indicate that users may interact in other languages or opt into a Chinese-only experience. Under the stated policy, a language constraint should either be optional for the user or explicitly justified as region-specific.
The trigger list contains very broad, generic academic phrases such as '找文献', '查论文', and '推荐文献', which are likely to match ordinary user requests beyond narrowly intended use. This increases the chance of unintended invocation and silent routing of user queries to external search behavior, which can cause privacy leakage and surprising tool activation.
The skill states it will use a browser to access external academic databases, but the user-facing description and activation surface do not clearly warn that search terms may be transmitted to third-party sites. Users may disclose sensitive research topics, unpublished ideas, or personal identifiers without realizing their query will leave the local system.
No suspicious patterns detected.
