Security audit
Security checks for vulnerabilities and agentic risk
This skill is a Chinese short-drama development workflow with disclosed, purpose-aligned project files and local indexing helpers.
Install this for Chinese-language short-drama development workflows. Expect it to read source material you provide and create or update project-development files such as briefs, story engines, episode indexes, and episode maps; review the companion @worldwonderer/short-drama skill separately if you install it too.
This finding is substantively the same class of issue: the skill presents itself as a story-development tool while also directing offline testing, file-level episode indexing, text extraction, and source-drift checks. Hidden or under-declared operational capabilities reduce transparency and can bypass user expectations about what data the skill will access and transform.
This finding is substantively the same class of issue: the skill presents itself as a story-development tool while also directing offline testing, file-level episode indexing, text extraction, and source-drift checks. Hidden or under-declared operational capabilities reduce transparency and can bypass user expectations about what data the skill will access and transform.
The skill advertises file-reading and file-writing related workflows, including generating project artifacts and mechanical indexes, but it does not declare an explicit tool scope such as permissions or allowed-tools. That creates an authorization ambiguity: the runtime may permit broader filesystem access than the skill actually needs, increasing the chance of unintended reads or writes if invoked in a sensitive workspace.
The trigger description contains broad, everyday phrases that could match many normal creative or planning requests, causing the skill to be invoked when the user did not intend it. Overbroad activation increases the likelihood of unnecessary file access, document creation, or workflow routing in contexts where the user only wanted general discussion.
L003 明确写明将‘中文小说、短剧或漫剧想法’发展成相关产物，整体文件也仅提供中文交互说明，但未说明是否支持用户选择其他语言。若该技能在更广泛环境中被调用，这种默认且未提供 opt-in 的语言约束可能构成语言/locale 政策违规。
The display name, description, and default prompt are all written only in Chinese, which indicates a fixed language/locale experience. The file does not offer user opt-in, language selection, or any justification that this skill is intended only for a Chinese-language or region-specific context.
The example embeds Chinese-language path segments and descriptive text such as "项目开发", "输入", and multiple Chinese prose fields, which suggests a fixed language/locale expectation in the skill artifact. Because there is no accompanying indication that users may choose another language or that the locale restriction is intentional and justified, this may violate the policy against forcing a specific language without opt-in.
The entire template is written in Chinese and instructs users to fill out all briefing fields in that language context, but it does not offer any language or locale choice. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly justified.
The entire skill template and instructions are written in Chinese, and there is no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking context. Under the policy, forcing a specific language without opt-in is a natural-language policy violation.
This markdown file contains all user-facing guidance in Chinese, and nowhere indicates that users may choose another language or that the content is intentionally limited to Chinese-speaking users. Under the policy rule, forcing a specific language without user opt-in is a natural-language locale violation.
The document title and all instructional content are written in Chinese, and nowhere in the file is there an indication that language is selectable or that the skill is intentionally limited to a Chinese-language workflow. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
This markdown file uses Chinese throughout and does not indicate that users may choose another language or that the skill is intentionally limited to a Chinese-language audience. Under the policy provided, forcing a specific language without user opt-in is a natural-language policy violation.
This markdown file presents all instructional content in a single language and does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-language audience. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy violation.
SQP-3 applies to all file types and covers language or locale policy violations. This file presents all instructions and examples exclusively in Chinese, and nowhere indicates that Chinese is optional, user-selected, or required for a region-specific purpose.
This file contains user-facing operational instructions exclusively in Chinese, which can amount to a language/locale policy violation when no opt-in or alternative language path is provided. The policy explicitly allows fixed locale only when the constraint is documented and justified, which is not stated here.
The title and the entire document are written in Chinese, and there is no indication that the skill supports multiple languages or that Chinese is an intentional, documented regional restriction. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The entire skill file is written in Chinese and provides no indication that language selection is optional or limited to a justified region-specific use case. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
The entire skill contract is written in Chinese and provides no indication that another language may be used or that Chinese is a justified region-specific requirement. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation.
This markdown file contains natural-language instructions exclusively in Chinese, beginning with the title on L001, and nowhere indicates that users may opt into another language or that the locale restriction is required. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The JSONL template includes hard-coded Chinese placeholder strings such as "<人物/观众各自知道到哪一步>" and "<本集若有误述，写哪条条款被误述及埋了什么线索>". This introduces a locale-specific requirement in the skill artifact without any indication that Chinese is optional or that the skill is intended only for a Chinese-language context.
The file presents all instructional content in Chinese and does not indicate that the skill is region-specific or that users may opt into another language. Under the natural-language policy rule, forcing a specific language without user choice can be a policy concern.
No suspicious patterns detected.
