Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple Chinese-language chart template helper with no hidden execution, credential access, network behavior, or persistence found.
Installers should expect Chinese-language documentation and placeholder HTML templates. Review generated chart HTML before sharing it if it contains sensitive data, but the packaged skill itself does not show security-significant access or persistence.
The manifest uses Chinese natural-language strings for the label and description, which imposes a specific language on users without any visible opt-in or documented locale constraint. This matches the policy category for language/locale violations because the file provides no alternative language selection or regional justification.
The manifest uses Chinese natural-language fields for the label and description, but provides no indication that the skill is region-specific or that users can choose another language. This can violate a language/locale policy when a skill implicitly forces one language without opt-in.
The skill metadata uses Chinese-only natural-language fields for the label and description, which imposes a specific language/locale without indicating user choice or that the skill is intentionally region-specific. This matches the policy concern for language or locale constraints that are not opt-in or explicitly justified.
The JSON metadata uses Chinese-only natural-language values for the label and description, which imposes a specific language/locale without any opt-in or documented regional justification. This matches the policy category for language or locale constraints that are not optional or clearly scoped.
The file presents the skill description, instructions, and command explanations only in Chinese. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is explicitly documented and justified.
The manifest uses Chinese-only natural-language metadata in the label and description fields. Because this file does not indicate that the skill is region-specific or provide any user language choice, it may conflict with an organizational policy requiring language/locale neutrality or user opt-in.
The manifest uses Chinese text for the user-facing label and description, and there is no indication that this skill is intentionally region-specific or that alternative locales are supported. This can violate language/locale policy when users are not given an explicit language choice or opt-in.
The manifest uses Chinese-only natural-language fields for the label and description. Per the policy, forcing a specific language without user opt-in or a documented locale-specific justification is a natural-language policy violation.
This manifest uses Chinese natural-language strings for the label and description, with no indication that the skill is region-specific or that users can opt into a language choice. That can violate language/locale policy when skills are expected to avoid forcing a specific language without user selection.
The document sets lang="zh-CN", which indicates a fixed Chinese locale. Under the policy rules, forcing a specific language or locale without user opt-in or documented justification can be a natural-language policy violation.
The document sets lang="zh-CN", which imposes a specific language/locale. Under the policy rules, forcing a locale without user opt-in or clear region-specific justification is a natural-language policy concern.
The template sets the document language to "zh-CN", which imposes a specific locale by default. The file does not provide any user opt-in, alternative locale handling, or justification that this skill is intended only for a Chinese-language context.
The document declares lang="zh-CN", which hard-codes a specific language/locale. Under the policy, locale constraints should either be user-selectable or clearly justified as region-specific; this placeholder file provides neither.
The document sets lang="zh-CN", which imposes a specific language/locale in the skill file. Under the policy criteria, forcing a locale without user opt-in or a clearly documented region-specific justification is a natural-language policy concern.
The document declares lang="zh-CN", which hard-codes a specific language/locale. Under the policy, locale-specific behavior should either be optional for the user or clearly justified as region-specific; this placeholder file provides neither.
The HTML document declares lang="zh-CN", which imposes a specific language/locale. Under the policy rule, locale constraints should either offer user choice or be clearly documented as justified for a region-specific use case, neither of which appears in this file.
The document declares lang="zh-CN", which imposes a specific language/locale setting. Under the policy, locale restrictions should either be optional for the user or clearly justified as region-specific; this file provides neither.
The document sets lang="zh-CN", which imposes a specific language/locale in a natural-language context. The file does not indicate that this locale is optional, user-selected, or required for a region-specific purpose.
No suspicious patterns detected.
