Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent Mysteel conference search tool that makes disclosed requests to Mysteel and keeps only local cached category data.
Install this if you want a Chinese-language helper for Mysteel industry conference searches. Be aware that it may send your search terms and filters to huizhan.mysteel.com and stores temporary category cache files inside the skill directory.
The skill describes capabilities that require network access and local cache reads/writes, but it does not declare any explicit tool scope or permissions boundaries. This creates a least-privilege problem: an agent runtime may grant broader tools than necessary or operators may be unable to review intended capabilities, increasing the chance of unintended file or network access.
The trigger phrases are broad enough to match ordinary conversation about meetings, which can cause the skill to activate unexpectedly. Over-triggering can leak user intent or route unrelated prompts into a networked skill, causing unnecessary external requests and reducing user control.
This code includes Chinese-first descriptions, help text, and runtime messages, which effectively forces a specific language experience for users. Under the policy, language constraints should either be optional for the user or clearly justified as a region-specific tool.
该 Markdown 文档标题及全文均以中文呈现，且未说明这是面向特定中文用户群体的区域性文档，也未提供其他语言选项。根据语言/locale 政策，强制单一语言且缺乏用户选择或明确正当说明，属于自然语言层面的潜在策略问题。
No suspicious patterns detected.
