Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward local generator for Chinese ecommerce/social recommendation copy, with no evidence of hidden access, persistence, exfiltration, or destructive behavior.
Install this if you want Chinese-language ecommerce and social platform copy generation. Review generated promotional or review-style text for truthfulness and platform compliance before publishing, especially where it implies real usage or endorsement.
The user-facing title, description, features, and usage examples are all presented in Chinese, with no indication that other languages are supported or that the user may choose their preferred language. This can violate language/locale policy where skills must not impose a specific language unless the constraint is explicit and justified.
This markdown file describes usage with generic phrases like "生成种草文案" and "生成朋友圈文案" without defining a bounded trigger list, activation context, or exclusion cases. These phrases are common natural-language requests in the skill's language domain and could overlap with ordinary conversation, increasing the risk of unintended invocation.
The file labels the skill as a Chinese-language content generator and all generated copy is written in Chinese for platforms like 小红书、抖音、朋友圈、知乎. This imposes a specific language/locale by default with no opt-in, choice, or documented region-specific justification, which matches the language/locale policy concern.
The comment at L064-L066 describes the method as generating '种草文案' (promotional seeding copy), which aligns with Xiaohongshu/Douyin/Moments marketing content. However, the dispatcher at L070-L075 also routes to generateZhihu, which produces a more review/Q&A-style answer format rather than the promotional copy implied by the docstring.
No suspicious patterns detected.
