Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Chinese workflow-template skill with no hidden execution, but some templates describe email, document, and social automation that users should deploy carefully.
Before installing, treat this as a workflow template library, not a ready-made secure automation system. Add approval steps, recipient allowlists, logging, data-retention limits, and privacy checks before connecting it to email inboxes, document stores, databases, or public posting accounts.
The natural-language content of the skill is presented exclusively in Chinese, including the core description and usage guidance. Under the policy, forcing a specific language without user opt-in can be a language/locale policy violation unless the locale restriction is clearly documented and justified.
The template explicitly automates email classification, auto-reply, and forwarding from an inbox, but provides no guardrails around consent, sensitive-data handling, recipient verification, or misrouting prevention. In a reusable workflow library, this omission can lead users to deploy unsafe automation that leaks private information, forwards messages to the wrong party, or sends inappropriate automated responses.
The document-processing template describes parsing uploaded files, extracting fields, storing them in a database, and archiving them, yet omits any warning that documents may contain confidential or regulated data. This is dangerous because users may process invoices, contracts, or reports without access controls, data minimization, retention limits, malware scanning, or encryption, increasing the risk of data exposure and compliance violations.
The file’s natural-language descriptions and example workflow are entirely presented in Chinese, and the automated reply message is also hard-coded in Chinese. This implies a fixed language/locale behavior without any user opt-in or documented locale constraint, which matches the policy-violation criteria for language choice.
The manifest description says only '快速搭建 OpenClaw 工作流自动化系统' ('quickly build an OpenClaw workflow automation system'), which describes a broad capability without specific trigger phrases, constraints, or exclusion conditions. In a manifest file, this kind of generic activation description can overlap with many ordinary requests about workflows or automation and may lead to unintended invocation.
No suspicious patterns detected.
