Security audit
Security checks for vulnerabilities and agentic risk
This skill is a Chinese-language insurance visualization helper that generates local HTML views without hidden execution, persistence, or data transfer behavior.
Installers should understand this skill is designed for Chinese-language insurance documents. Do not rely on its claim or payout analysis as legal, financial, or insurer-binding advice; verify important conclusions against the policy and a qualified professional.
The label and description are written entirely in Chinese, which indicates a fixed language/locale choice in the skill metadata. The file does not offer any user language choice or document that the skill is intentionally limited to a Chinese-speaking or region-specific context.
The manifest uses only Chinese for the user-facing label and description, which indicates a fixed language choice in natural-language metadata. There is no accompanying indication that the skill is region-specific or that users can opt into this locale, which can violate language/locale policy requirements.
The natural-language content for the label, description, and comparison fields is entirely in Chinese, which indicates a fixed locale behavior. The file does not document that this skill is China/Chinese-specific or offer any user opt-in or language choice, so it may violate language/locale policy requirements.
The label, description, and category names are all Chinese-language strings, and the file does not indicate that the skill is China-specific or that users can opt into this locale. Under the policy, forcing a specific language without user choice or documented justification is a natural-language policy violation.
The manifest uses Chinese-only natural-language fields for the label and description. Under the policy, forcing a specific language without user opt-in can be a locale/language policy violation unless the regional constraint is clearly documented and justified, which is not present here.
The label and description are written only in Chinese, which imposes a specific language/locale in the skill metadata. There is no indication that users can choose another language or that the skill is intentionally limited to a Chinese-speaking or region-specific context.
The template explicitly sets lang="zh-CN", which imposes a specific language/locale in natural-language metadata. The file does not provide any opt-in, alternative locale handling, or documented region-specific justification, so this may violate language/locale policy requirements.
The document hard-codes lang="zh-CN", which is a natural-language locale constraint. In this file there is no indication that the skill is region-specific or that users can opt into another language, so it may violate the policy against forcing a specific language or locale without justification.
The document sets lang="zh-CN", which is a natural-language locale choice embedded in the file. Under the policy, forcing a specific language or locale without user opt-in or documented justification is a reportable issue.
This file sets the document language to "zh-CN", which is a natural-language locale constraint. The provided content does not indicate that users can opt into another language or that the Chinese-only locale is required for a region-specific or compliance-specific purpose.
The document declares lang="zh-CN", which hard-codes a specific language/locale. Under the policy rules, forcing a locale without user opt-in or clear justification is a natural-language policy concern, and this placeholder file does not explain any region-specific requirement.
The document sets lang="zh-CN", which enforces a specific language/locale in the skill file. Under the policy, locale-specific behavior should either offer user choice or be clearly justified; this placeholder file provides neither.
This HTML template sets lang="zh-CN" and displays Chinese-only content, which can constitute a language/locale policy violation when no user opt-in or alternative locale handling is provided. The file does not indicate that the skill is intentionally limited to a China-specific or Chinese-only context.
The template sets lang="zh-CN", which imposes a specific language/locale in the file without any visible opt-in or explanation that the skill is intentionally region-specific. The surrounding comments and page text are also exclusively Chinese, reinforcing a fixed locale assumption.
