Security audit
Security checks for vulnerabilities and agentic risk
This Chinese document-comparison skill is coherent and user-directed, with no hidden execution, network retrieval, persistence, or privilege behavior found.
Use this skill only with documents you are authorized to share with the agent. Redact secrets, personal data, confidential business terms, and regulated information when possible, especially for contracts or legal materials.
The skill description and operating instructions are entirely in Chinese, with no indication that another language is supported or that users may choose their preferred language. Under the language/locale policy, forcing a specific language without opt-in is a natural-language policy violation unless the locale restriction is clearly documented and justified.
The skill explicitly asks users to paste full old and new document contents, but it does not warn that those documents may contain confidential, personal, legal, or proprietary data. In a document-comparison context, this omission increases the chance that users will submit sensitive content without understanding privacy and data-handling risks, especially for contracts, reports, and legal materials named in the skill.
The manifest uses Chinese-only natural-language strings for the label and description, with no indication that language is selectable or that the skill is intended only for a Chinese-speaking or region-specific environment. This can violate language/locale policy expectations when skills should not force a specific language without user opt-in or documented justification.
The label and description are written only in Chinese, which can impose a specific language on users without any opt-in or documented locale constraint. This matches the policy category for language or locale restrictions when no choice or justification is provided.
The HTML document hard-codes lang="zh-CN", which expresses a specific language/locale choice in a user-facing template. The file does not offer a user opt-in or indicate that this template is intentionally region-specific, so it may violate the stated language/locale policy requirement.
The HTML document declares lang="zh-CN", and the visible/template text is also fixed in Chinese. Under the policy rules, forcing a specific language or locale without user opt-in or clear justification is a natural-language policy concern.
The HTML document declares lang="zh-CN", which hard-codes a specific language/locale. Under the policy rules, a forced locale is a finding when there is no visible opt-in, alternate language support, or documented reason that this template must be Chinese-specific.
The HTML sets lang="zh-CN", which hard-codes a specific language/locale. Under the policy criteria, forcing a locale without user opt-in or a clearly documented region-specific justification is a natural-language policy concern.
The HTML document explicitly sets lang="zh-CN", which indicates a fixed Chinese locale. Under the policy rule, forcing a specific language or locale without offering user choice or documenting a justified region-specific constraint is a natural-language policy violation.
The file sets the document language to "zh-CN", which is a natural-language locale constraint. Under the policy, forcing a specific language or locale without user opt-in or clear justification can be a violation, and this placeholder template does not provide such justification.
The document declares lang="zh-CN", which fixes the content locale to Simplified Chinese. Under the policy rule for natural-language constraints, this is a locale-specific choice without any visible opt-in or justification in the file.
The document declares lang="zh-CN", which imposes a specific language/locale in the file. Under the policy, locale restrictions should either be user-selectable or clearly justified as region-specific, and this placeholder template provides neither.
No suspicious patterns detected.
