Security audit
Security checks for vulnerabilities and agentic risk
This is a local Chinese-language compliance text checker with no evidence of network access, persistence, credential use, or hidden side effects.
Reasonable to install for Chinese-language, local pre-publication checks of e-commerce copy. Treat results as heuristic flags, not legal advice or certification; verify current US/EU obligations and note the stray finance wording plus PRC disclaimer before relying on it in a formal workflow.
The module docstring, CLI help text, and user-facing output are all hard-coded in Chinese, which imposes a specific language on users. The file does not offer any opt-in, localization switch, or justification that the tool is limited to a Chinese-speaking region or audience.
The module docstring and detection logic are clearly scoped to cross-border e-commerce compliance terms, but the argparse description at L100 says "金融消保合规护栏检测内核" and the closing guidance at L136 references "持牌经营、风险揭示" obligations associated with financial compliance. This is an active contradiction in inline/documentation text about the skill's intent, not just an omission.
This file’s natural-language docstring, labels, and term list are entirely written in Chinese, and the stated scope targets US/EU cross-border e-commerce content without indicating that Chinese is optional or user-selected. That creates a language/locale policy concern because the skill appears to impose a specific language on a broad audience rather than offering opt-in or documenting a narrow, justified regional limitation.
The file’s natural-language content describing the skill is entirely in Chinese, and there is no indication that users can choose another language or that the skill is intentionally limited to a Chinese-language audience. Under the stated policy, forcing a specific language without user opt-in can be a language/locale policy violation.
The natural-language policy text states that the disclaimer is governed by and interpreted under the laws of the People's Republic of China. This imposes a specific legal/jurisdictional framework in the skill documentation despite the skill targeting US/EU cross-border compliance use cases, and it does not offer user choice or explain why this locale constraint is required for operation.
No suspicious patterns detected.
