Security audit
Security checks for vulnerabilities and agentic risk
This is a simple code-generation helper with no packaged executable behavior, but users should review any generated Python or Pandas code before running it.
Install only if you want a Chinese-language helper for generating Python and Pandas snippets. Treat its output as draft code: inspect it, run it in a limited environment, and avoid giving it sensitive datasets unless you are comfortable with the LLM/API workflow involved.
The trigger condition is extremely broad ('send a message containing the skill name or related instructions'), which can cause the skill to activate in unintended contexts. For a skill that generates Python and Pandas code, accidental invocation can expose users to unreviewed code-generation behavior and make prompt-injection or misuse easier.
The safety statement claims there is 'no risk' because the skill only does text processing and normal API calls, but the skill's core function is generating Python/Pandas code. Code generation itself is a meaningful risk surface because generated code may be unsafe, destructive, or misleading if users execute it without review; the blanket safety claim may reduce appropriate caution.
All user-facing title and instructions are presented only in Chinese, with no indication that the user can choose another language. This may violate language or locale policy where skills should not force a specific language without opt-in.
No suspicious patterns detected.
