Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Chinese-language worldbuilding skill that reads its own references and optionally user-specified character skills to generate new world skill files.
Install this if you want a Chinese-language worldbuilding workflow. Review generated Skill files before enabling them, and only provide character Skill paths you are comfortable having summarized into a shared world model.
The trigger phrases are broad enough to match ordinary discussion about worldbuilding, fictional settings, or general design, which can cause the skill to activate unexpectedly outside the user's intent. In an agent environment, overbroad activation can redirect conversations, consume resources, or cause unintended file reads/writes or workflow execution under the wrong context.
The entire skill exemplar is written as Chinese-only operational content, including headings, input/output schema, and routing logic, with no indication that users may choose another language. Under the policy rule, a skill that effectively requires a specific language without opt-in is a natural-language policy violation unless the locale restriction is explicitly documented and justified.
The entire skill file is written in Chinese and provides no indication that language selection is optional or that the skill is intended only for a Chinese-language audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
The document title and all operational instructions are written as a fixed Chinese-language methodology, and no line offers an alternative language or user opt-in for locale selection. Under the policy rule, forcing a specific language without user choice is a natural-language locale violation.
The documentation says Mode B routes to 'W8 extraction then merge' and later refers to 'W8全域', but the domain inventory only defines W0-W7 and contains no W8 tasks. This is an active contradiction in the skill's own documentation about how character-extraction mode is executed.
This file’s natural-language content is exclusively Chinese and does not indicate that the user can select another language or that the locale restriction is intentional. Under the policy criteria, forcing a specific language without user opt-in is a reportable issue across all file types.
This markdown file contains user-facing instructional content exclusively in Chinese, and there is no indication that the user can choose another language or that the language restriction is intentionally scoped. Under the policy rule, forcing a specific language without opt-in is a natural-language policy concern.
该 markdown 文件的标题、说明和全部任务定义均仅以中文书写，没有说明这是面向特定中文区域/团队的限定文档，也没有提供用户可选择其他语言的机制。按规则，强制单一语言而无用户 opt-in 属于自然语言层面的 locale policy 风险。
