Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Chinese short-fiction analysis workflow that writes local analysis outputs and source backups, with no evidence of hidden execution, credential access, networking, or deceptive behavior.
Install this only if you want a Chinese-language short-fiction analysis workflow that saves durable local copies of the analyzed text and generated reports. Do not provide confidential, sensitive, or unauthorized copyrighted source material unless local retention in `拆文库/{书名}/` is acceptable.
The trigger list contains very broad natural-language phrases such as '分析这篇短篇' and similar wording that can match ordinary user intent without a clear, explicit invocation boundary. This increases the chance of accidental activation, causing the agent to enter a multi-stage pipeline with file reads/writes and persistent storage when the user may have only wanted lightweight analysis.
The file’s description and operating instructions are entirely in Chinese and prescribe fixed Chinese prompts to the user, with no indication that another language may be used on request. That creates a natural-language locale constraint without opt-in or a documented region-specific justification.
The skill directs automatic creation of directories, backups, and metadata files before presenting a clear user-facing warning or obtaining explicit consent for persistence. In practice, this can surprise users, store sensitive copyrighted text on disk, and create durable artifacts that outlive the session.
The skill explicitly requires preserving a full copy of the user-provided source text in a persistent location for later reuse by downstream skills. This creates a clear data retention and privacy risk: sensitive, proprietary, or copyrighted text is duplicated, retained, and made available to subsequent workflows beyond the immediate analysis task.
The document title and core instructions are entirely in Chinese and state that specific stages should read this file, which effectively imposes a language requirement on users of the skill. There is no indication that another language is supported, that the language choice is optional, or that the locale restriction is necessary for a region-specific purpose.
The title and the entire document prescribe a specific Chinese reporting style for analysts, which functions as a language constraint. Under the policy, forcing a specific language or locale without explicit user choice or justified region-specific scope is a natural-language policy violation.
This markdown file presents all instructions and reporting formats exclusively in Chinese, which can amount to a language/locale policy violation if users are not given an explicit opt-in or alternative language. The content does not indicate that the skill is region-specific or that Chinese is required for compliance or domain constraints.
This markdown file contains all instructions and templates in Chinese, which effectively forces a specific language for users of the skill. The file does not mention any opt-in, alternative language, or region-specific justification for this locale restriction.
This markdown file contains user-facing instructions exclusively in Chinese, and nowhere indicates that the skill is Chinese-only by design or that users may choose another language. Under the language/locale policy, forcing a specific language without opt-in is a natural-language policy concern.
The file is entirely written as Chinese-only operational guidance, including the required output phrasing at L47. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation, and this file does not offer any language/locale choice or explain why Chinese is required.
This file contains user-facing natural-language instructions only in Chinese, and nowhere indicates that users may choose another language or that the skill is intentionally limited to a Chinese-speaking context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
Line L03 instructs the auditor that the report wording should follow another style document and the entire file is written as Chinese-only operating guidance. This creates a language constraint without any visible user opt-in or alternative locale choice, which fits the language/locale policy violation criteria.
The file is written as prescriptive operational guidance entirely in Chinese, including imperative instructions such as reading the file at a specific stage and following linked checklists. There is no indication that the user may choose another language, nor any documented region-specific justification for requiring Chinese, which makes this a natural-language locale policy issue.
The title and operating instruction are entirely in Chinese, and L003 instructs readers to use this file at specific stages without indicating any language option. This can violate language/locale policy when a skill implicitly forces a specific language without user opt-in or documented regional justification.
This markdown file contains user-facing instructional content exclusively in Chinese, with no indication that language selection is optional. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
No suspicious patterns detected.
