Security audit
Security checks for vulnerabilities and agentic risk
This skill appears to be a Chinese-language Gantt chart generation helper with static templates and no hidden execution, persistence, credential use, or network behavior.
Install this if you are comfortable with a Chinese-language Gantt chart helper that produces static HTML from task data. Review any generated HTML before sharing it, because project schedules may contain business-sensitive names, dates, owners, and dependencies.
The user-facing label and description are written only in Chinese, which implies a fixed language choice in the skill's natural-language metadata. The file does not provide any opt-in, locale selection, or justification that this is a region-specific skill, so it may violate language/locale policy expectations.
This manifest uses Chinese-only natural-language values for the label, description, and statuses, which imposes a specific language/locale on users without offering a choice. The stated policy flags language or locale constraints unless the skill explicitly provides opt-in or clearly documents that it is intended for a region-specific context.
The manifest uses Chinese natural-language text for the user-facing label and description, but provides no indication that this skill is region-specific or that users can opt into a language preference. Under the language/locale policy, hard-coding a specific language without documented justification or choice can be a policy violation.
The manifest uses Chinese text for the user-facing label and description, but does not document that the skill is intended only for Chinese-speaking users or provide any language choice. Under the policy, fixed locale/language behavior without opt-in or justification can be a natural-language policy violation.
The manifest uses Chinese-only natural-language strings for the label and description. Under the policy, forcing a specific language without user opt-in or a documented regional justification is a locale-policy concern.
The manifest text for the label and description is entirely in Chinese, which indicates a language-specific presentation without any visible opt-in, fallback, or justification for a region-specific audience. This can violate language/locale policy when users are not given a choice of interface language.
The file sets lang="zh-CN", which imposes a specific language/locale on the rendered content. Under the policy rules, locale restrictions should either be optional for the user or clearly justified as region-specific, neither of which is present in this file.
The template sets the document language to "zh-CN", which is a natural-language locale choice applied by default. The file does not indicate that this locale is optional, user-selected, or justified as a region-specific requirement.
The HTML document sets lang="zh-CN", which imposes a specific language/locale choice in the skill artifact. Under the policy, locale-specific behavior should either offer user choice or clearly document why the restriction is required, and this placeholder file does neither.
The document hard-codes lang="zh-CN", which imposes a specific language/locale setting. Under the policy, locale restrictions should either offer user choice or be clearly documented as necessary for a region-specific use case, neither of which is present in this file.
The HTML document declares lang="zh-CN", which fixes the content locale to Simplified Chinese. In this file there is no accompanying natural-language justification, opt-in, or indication that the skill is intentionally region-specific, so it may conflict with a language/locale choice policy.
The file declares lang="zh-CN", which imposes a specific language/locale setting. Under the policy criteria, locale constraints should either offer user choice or be clearly documented as justified for a region-specific skill, neither of which is present in this file.
The template explicitly sets lang="zh-CN", which imposes a specific language/locale. The file does not provide any user opt-in, alternative locale handling, or documented region-specific justification, so this is a natural-language locale policy concern.
The document sets lang="zh-CN", which is a natural-language locale constraint. In this file there is no indication that the locale is optional, user-selected, or justified as a region-specific requirement, so it appears to force a specific language setting.
