Security audit
Security checks for vulnerabilities and agentic risk
This skill is a markdown-only anti-hallucination checklist with one disclosed but loosely scoped memory note.
Before installing, consider whether you want a skill that may ask the agent to write mistake records into memory. A safer use pattern is to store only brief, non-sensitive corrections and avoid recording private task details.
The entire skill description and operating instructions are written only in Chinese, and there is no statement that use of Chinese is optional or limited to a China-specific context. Under the language/locale policy rule, this can constitute a locale constraint without user opt-in.
The manifest describes a graded checking mechanism focused on preventing unsupported factual output and marking uncertainty. However, the documented workflow adds a separate behavior of persisting mistakes to memory, which goes beyond output-checking and enters stateful incident retention.
A skill whose stated purpose is to enforce evidence-based answering and confidence labeling would be expected to define checking and response rules. Persisting information to memory is a distinct capability that is not obviously required by the manifest description and could retain broader contextual data than necessary.
No suspicious patterns detected.
