Security audit
Security checks for vulnerabilities and agentic risk
This is a Markdown-only tongue-photo diagnosis skill, but its medical-diagnosis framing and broad health trigger warrant review before use.
Install only if you want a Chinese-language TCM tongue-observation aid, not a reliable diagnostic tool. Do not use it to rule in or rule out illness, delay care, handle urgent symptoms, or choose medication; keep uploaded mouth photos private and consult a qualified clinician for health concerns.
The file presents the skill entirely in Chinese and provides no indication that output language should follow the user's preference or be configurable. Under the policy, locale or language constraints should either be optional for the user or explicitly justified as region-specific; neither is stated here.
The trigger list includes broad medical and wellness terms such as '健康评估' alongside common tongue-related phrases, which can cause the skill to activate in conversations that are only generally about health rather than explicitly requesting tongue-image analysis. In a medical-diagnosis context, unintended invocation is more dangerous because it may lead users to receive quasi-diagnostic guidance without clear consent or appropriate context.
This file presents detailed medical diagnostic claims linking tongue features and tongue fissure locations to specific organ diseases and prognosis, but provides no warning that the content is not validated medical advice and not a substitute for professional evaluation. In the context of a skill explicitly intended to let users upload tongue photos for diagnosis, this omission materially increases the risk that users will rely on unreliable or non-evidence-based guidance, delay care, or make harmful health decisions.
This markdown file presents all user-facing output exclusively in Chinese, including headings, report sections, and warnings. Under the policy rule for natural-language violations, forcing a specific language without offering choice or documenting a justified locale constraint is a reportable issue.
SQP-3 applies to all file types and covers language or locale policy violations. This file presents all instructional and reference content solely in Chinese and does not provide user opt-in, alternatives, or justification for enforcing that language.
SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all instructional content only in Chinese, with no indication that the skill is region-specific or that users can opt into this language, which may conflict with organizational language-choice expectations.
This markdown file consists solely of Chinese-language instructions and does not indicate that the user can choose another language or that the skill is intentionally restricted to a Chinese-speaking context. Under the natural-language policy rules, forcing a specific language without opt-in can be a locale-policy violation.
