Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent Chinese-language product-photography planning skill with a local helper script and no evidence of hidden access, persistence, or unsafe behavior.
Installers should expect a Chinese-language workflow for planning model/product photo shoots. The package appears low-risk from a security perspective, but non-Chinese users may want translation support or clearer locale documentation before relying on it.
The entire skill description, input format, and output format are written exclusively in Chinese, and there is no indication that users may choose another language or locale. This creates a language-policy issue because the skill effectively constrains interaction to a specific language without documented user opt-in or justification.
The skill documentation is entirely presented in Chinese, and there is no indication that users can choose another language or that the skill is intentionally limited to a Chinese-speaking audience. This can violate language/locale policy where skills should not force a specific language without user opt-in or clear justification.
The display name, description, and author fields are written entirely in Chinese, but the manifest does not state that the skill is China/Chinese-language specific or that users can choose another language. Under the policy rule, forcing a specific language without opt-in or documented locale justification can be a natural-language policy issue.
This code file contains natural-language descriptions primarily in Chinese with English only as a title, and the rest of the user-facing help/output strings are also fixed in Chinese. Under the policy rule for language/locale constraints, a skill that fixes a language without offering user choice can be considered a locale policy issue unless explicitly justified.
The script's usage text, command descriptions, and printed results are all emitted in Chinese, with no mechanism for the user to select another language. This is a natural-language locale constraint affecting user interaction and is not documented as a region-specific requirement.
No suspicious patterns detected.
