Security audit
Security checks for vulnerabilities and agentic risk
This skill is a Chinese insurance-policy analysis assistant that asks for sensitive personal and policy details, but the requests are disclosed and aligned with its stated purpose.
Install only if you are comfortable using a Chinese-language insurance analysis helper and sharing sensitive health, family, financial, and policy information in the chat. Redact names, ID numbers, addresses, policy numbers, and other identifiers unless they are truly needed, and treat the output as informational rather than professional insurance advice.
The trigger phrases are broad enough to activate on many generic insurance-related conversations, which can cause the skill to engage when the user did not explicitly request policy analysis. In this skill, that increases the chance of unnecessary collection of sensitive personal and financial data such as age, health status, family structure, income, debt, and insurance details.
This markdown file uses only Chinese throughout the title, instructions, tables, and notes, which effectively forces a specific language for users of the skill. Under the policy, language constraints should either be optional for the user or clearly documented as justified for a region-specific tool.
This questionnaire requests a broad set of sensitive personal data, including health status, family details, income, debt, and insurance policy information, but provides no notice about why the data is collected, how it will be stored, who can access it, or how long it will be retained. In the context of an insurance-analysis skill, this data is highly sensitive and could enable privacy harm, profiling, or financial targeting if mishandled or exposed.
The skill content, trigger phrases, workflow, and output templates all assume Chinese-language interaction, and there is no indication that users may choose another language. This can violate a language/locale policy when a skill forces one language without user opt-in.
A language or locale policy issue exists when a skill forces a specific language without user choice. This questionnaire is presented only in Chinese and contains no indication that users may choose another language or that the locale restriction is intentional and documented.
This markdown file contains user-facing instructional content exclusively in Chinese, with no indication that the user can choose another language or that the locale restriction is justified. Under the policy rule for language or locale constraints, forcing a specific language without user opt-in can be a natural-language policy violation.
No suspicious patterns detected.
