Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Chinese official-document rewriting skill with no executable code, network use, persistence, or hidden authority.
Install this only if you want help with Chinese official or formal organizational writing. Review outputs for factual accuracy, especially added background phrasing, policy terms, titles, and any placeholders before using them in real documents.
The description defines the skill as optimizing “中文公文、讲话、汇报、案例、函件等文本”, which constrains operation to Chinese-language content. The file does not state that the user can opt into another language, nor does it explicitly justify the language restriction as a documented region-specific constraint.
The trigger list is very broad and includes generic editing phrases such as '优化', '润色', and '修改', which can match ordinary user requests outside the intended narrow skill scope. This can cause unintended invocation of the skill, leading the agent to apply domain-specific rewriting behavior when the user only wanted general editing, increasing the risk of scope confusion and unwanted transformations.
The document is entirely framed as a normative guide for official-document wording in Chinese, with prescriptive language about correct forms and usage. Because no user opt-in or explicit statement limits the skill to Chinese-language government-document workflows, this can be read as forcing a specific language/locale style in violation of the language-choice policy.
The file begins with and consistently presents the workflow as Chinese-only guidance, with no indication that users may choose another language or locale. Under the policy rule, forcing a specific language without opt-in is a natural-language policy concern unless the locale restriction is explicitly justified.
No suspicious patterns detected.
