Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed, documentation-only guide for building screen-reader-accessible HTML games, with minor usability and routing caveats but no unsafe behavior found.
Before installing, note that this skill is best suited to requests explicitly about screen-reader-accessible HTML/web games. Non-Chinese users may need to ask the agent to respond in their preferred language, and authors may want to narrow the trigger phrase to avoid unintended activation.
The usage section gives a generic trigger, '开发无障碍游戏，按照 ... 编写', which overlaps with ordinary requests about game development and does not define when this skill should or should not activate. The README does not provide a bounded trigger list, exclusions, or negative examples to narrow invocation scope.
The skill content is entirely in Chinese and does not offer a user language choice, which can force responses into Chinese or bias behavior away from the user's preferred language. This is primarily a safety and usability issue: users may misunderstand guidance, and incorrect implementation advice could result if the model follows the skill language instead of the user's language.
The trigger list includes the broad English phrase "accessible game," which lacks scope constraints and may activate the skill for unrelated requests about accessibility or games. Overly broad triggers can cause unintended routing, leading the agent to apply specialized instructions in contexts the user did not intend.
The description says the skill '支持国内争渡读屏', which imposes a China-specific product/locale focus in the skill behavior, but the README does not indicate that this is optional or limited to a region-specific use case. Under the policy, locale-specific constraints should be optional or clearly justified.
No suspicious patterns detected.
