Security audit
Security checks for vulnerabilities and agentic risk
This is a static game-design writing skill that creates a scoped design document and does not request privileged access, persistence, or external execution.
Before installing, confirm you are comfortable with a Chinese-authored design-method skill that writes a game design document into your project. It does not show signs of hidden execution or data exfiltration, but users who need English-only internal instructions may find the reference material less accessible.
The default prompt says to use "$game-world-design" to deepen a concept, but the manifest does not define when this skill should or should not activate beyond that single broad instruction. It lacks explicit scope, constraints, or negative examples, which can make invocation behavior ambiguous in a manifest context.
Line L04 states that the writing must follow the PRODUCT_BRIEF output language and rating, while the document itself is entirely written as a Chinese-only instruction set with no indication that users may choose another language or locale. This creates a natural-language locale constraint without explicit user opt-in, which matches the language policy violation category.
This markdown file contains user-facing natural-language instructions only in Chinese, and there is no indication that the skill is region-specific or that users can opt into this locale. Per the policy, forcing a specific language without user choice is a natural-language policy violation.
The entire document is written in Chinese and provides no indication that language selection is optional or that the skill is intended only for a Chinese-speaking audience. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation.
No suspicious patterns detected.
