Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese reading-list helper with disclosed local storage and optional sharing/export features, with privacy caveats but no evidence of hidden or malicious behavior.
Install this if a Chinese-language reading-list workflow fits your use case. Before using share or export features, confirm exactly what will be sent to Notion, Obsidian, or other destinations, especially for private research topics, internal URLs, PDFs, notes, or tags.
The natural-language instructions, examples, and descriptions are entirely in Chinese, which effectively forces a specific language for interaction. The file does not offer multilingual use, user opt-in, or a justification that the skill is intended only for a Chinese-language context.
The skill advertises exporting reading-list data to external services such as Notion and Obsidian but does not warn users that article lists, notes, tags, and reading history may be transmitted outside the local workspace. This creates a privacy and data-governance risk because users may unknowingly sync sensitive research topics or internal references to third-party platforms.
No suspicious patterns detected.
