Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese-language contract-review skill with no code execution, persistence, credential access, or hidden data flow, though users should treat its legal guidance as non-lawyer assistance.
Install only if you want Chinese/PRC-oriented contract review assistance. Treat outputs as preliminary risk spotting, verify current law and jurisdictional fit, and consult a qualified lawyer for important contracts.
The skill description and all user-facing content are Chinese-only, and the sample configuration sets "language": "zh-CN" without offering a user choice or documenting this as an explicit opt-in constraint. This can violate language/locale policy because it imposes a specific locale by default rather than allowing the user to choose.
The usage section lists activation-style examples such as "审查这份合同 并指出风险点" and "分析这份合同的违约责任条款", which are generic natural-language requests that could overlap with ordinary conversation. The file does not provide explicit trigger boundaries, required invocation format, or negative examples to clarify when this skill should activate versus when it should not.
The legal basis cites '《中华人民共和国合同法》', which has been repealed and subsumed by the Civil Code. In a legal-review skill, outdated legal authorities can mislead users, degrade compliance guidance, and produce materially incorrect risk assessments or clause recommendations, especially if users rely on the cited basis during negotiation or dispute preparation.
No suspicious patterns detected.
