Security audit
Security checks for vulnerabilities and agentic risk
This is a local Chinese e-commerce compliance checklist tool with report output, and I found no hidden network access, persistence, credential use, or destructive behavior.
Install this only if you want a Simplified Chinese, mainland China-focused e-commerce compliance checklist. Treat its output as informational, not legal advice, and choose report output paths deliberately because the CLI writes wherever --output points.
The entire skill description and usage guidance are presented only in Chinese, and the file does not indicate that Chinese is optional or that the tool is intentionally limited to a Chinese-speaking or China-specific audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The skill advertises local execution and includes commands that write output reports to user-specified files, but it does not declare any explicit tool scope such as permissions or allowed-tools. That mismatch can cause an agent runtime to grant broader file-write capability than users expect, increasing the risk of unintended file modification or abuse if the skill is invoked in a permissive environment.
This Python file presents the tool description entirely in Chinese and frames the skill for a Chinese regulatory context, but nowhere indicates that the skill is China-specific only or that users can choose another language/locale. Under the policy rule for natural-language violations, forcing a specific language without opt-in should be flagged unless the locale constraint is clearly documented and justified.
This markdown file contains user-facing natural-language content exclusively in Chinese, and there is no surrounding text indicating that the skill is region-specific or that language selection is optional. Under the language/locale policy, forcing a specific language without user opt-in can be a policy concern.
The disclaimer states that the tool is designed based on Chinese law and that disputes are governed by PRC law and a specific court venue. This is a natural-language locale/jurisdiction constraint presented as a blanket policy, without offering users a choice or explicit opt-in.
This markdown file uses Chinese throughout and does not state that the skill documentation is Chinese-only or offer any language/locale choice. Under the policy rule, forcing a specific language without opt-in can be a natural-language policy violation.
The user-facing description and usage guidance are written entirely in Chinese and target users in mainland China, but the file does not explicitly offer an alternative language or state that the locale is an opt-in preference. Under the policy rule, forcing a specific language can be a natural-language policy issue unless the locale constraint is clearly documented and justified.
The natural-language description includes only a Chinese-language scope ('中小商家电商合规快速筛查核心模块'), which may imply a fixed language or locale context. Because the file does not indicate that users can choose another language or that the locale restriction is explicitly justified here, this can be a language/locale policy concern.
No suspicious patterns detected.
