Security audit
Security checks for vulnerabilities and agentic risk
This is a frontend architecture guidance skill with no executable payload, persistence, credential access, or hidden data handling.
Install this if you want Chinese-language frontend architecture guidance. Review the model setting if your environment treats model: opus as a paid or external model route, and be aware that broad frontend planning phrases may activate the skill in general architecture discussions.
The README presents the skill name, description, and usage instructions entirely in Chinese, and the trigger examples are also Chinese-only. There is no indication that users may choose another language or that the skill is intentionally restricted to a Chinese-speaking context.
The trigger conditions are broad conversational phrases like '新项目技术选型' and '项目结构怎么组织' without clear scope boundaries, so the skill may activate in many general software-planning contexts where the user did not intend to invoke this specific architecture behavior. Unintended activation can cause context hijacking, irrelevant guidance, or interference with other more appropriate skills, especially in multi-skill agent environments.
Skill selects an external model or provider that may use a different account or billing plan than the operator expects. Undisclosed model switches can cause unexpected cost or quota consumption.
---
name: frontend-architecture
description: Designs scalable frontend architecture for large applications: project structure, module boundaries, dependency management, code splitting strategy, and technical debt prevention. Use when 前端架构, 项目结构, 模块划分, 技术选型, 架构设计, or scaling frontend apps.
model: opus
---
# 前端架构设计（Frontend Architecture）
The manifest description and heading present the skill primarily in Chinese and specify Chinese trigger phrases such as “前端架构” and “项目结构” without indicating that other languages are equally supported. This can be read as a locale/language constraint without user opt-in, which falls under the natural-language policy check.
The skill name, tagline, and description are written in Chinese, but the manifest does not state that the skill is intended only for Chinese-speaking users or offer any language/locale choice. This can create a language policy issue if users are not given an opt-in or clear locale limitation.
No suspicious patterns detected.