Security audit
Security checks for vulnerabilities and agentic risk
This is a static Chinese listed-company compliance reference skill with sensitive templates that fit its stated compliance purpose.
Use this as a compliance drafting aid, not legal advice. If using the insider-information templates, handle identity numbers, trading records, and relatives' information with strict access limits, minimization, secure storage, and current PRC legal review.
The manifest explicitly sets chinese: true and tags the skill as Chinese-only, which indicates a fixed language/locale constraint. The document does not state that users may choose another language or opt in to Chinese output, so this is a natural-language locale policy concern under the stated rule.
The skill content is entirely presented in Chinese from the title onward, with no indication that users may choose another language or locale. Under the policy rule for natural-language violations, forcing a specific language without opt-in can exclude users who do not operate in that language.
The entire skill file is written in Chinese and provides no indication that users may choose another language or that the Chinese-only presentation is an intentional, documented locale restriction. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.
该模板要求登记身份证号、内幕信息知悉时间和具体内幕信息内容，属于高敏感个人信息与敏感业务信息的组合，但文档未说明收集目的、最小必要范围、保存期限、访问权限或保密要求。若被直接投入使用，容易导致过度收集、未授权访问或泄露，进而引发隐私侵害、合规处罚及内幕信息扩散风险。
自查表要求披露本人及亲属持股和交易情况，涉及个人金融信息及亲属关联信息，敏感性较高，但模板未告知用途、处理边界、共享对象或保密措施。此类信息一旦被滥用或泄露，可能造成个人隐私损害、画像分析风险，甚至被用于不当监控或二次利用。
This markdown file contains user-facing content exclusively in Chinese and does not mention that the language is fixed, optional, or region-specific. Under the language/locale policy rule, forcing a specific language without user opt-in can be a natural-language policy violation.
This markdown skill file presents all instructions and templates exclusively in Chinese, and there is no indication that the language choice is optional or region-specific. Under the policy rule for natural-language violations, forcing a specific language without user opt-in should be flagged unless the locale constraint is explicitly justified.
该技能文件标题及全部内容均以中文撰写，未说明这是面向特定中文用户群体的限定模板，也未提供其他语言选项。按规则，若技能强制特定语言且没有用户选择或明确、合理的区域性说明，可视为语言/locale 策略风险。
This markdown template is entirely written as a fixed Chinese-language board notice and does not indicate that language choice is optional or limited to a China-specific/regional use case. Under the stated policy, hard-coding a specific language without opt-in can be a natural-language policy violation.
No suspicious patterns detected.
