Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent Chinese Gaokao admissions planning helper with no hidden persistence, privileged actions, or unrelated data access found.
Installers should treat this as a Chinese Gaokao reference assistant, verify admissions advice against official provincial examination authorities, and only configure the optional API URL/key for providers they trust.
The trigger text says to use the skill whenever the user asks questions related to gaokao, subject selection, applications, admissions, or score lines. This is broad and lacks exclusion conditions or a more specific invocation scope, which can cause unintended activation for loosely related conversations.
The natural-language instructions and examples consistently assume Chinese-language interaction, but the file does not state that language selection is optional or limited to a China-specific audience. Under the policy, forcing a specific language without user opt-in can be a locale/language policy issue.
The module docstring presents the tool and its usage entirely in Chinese, including the invocation description, with no indication that language is configurable or limited to a specific Chinese-only context. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation.
The command-line usage text and section header are emitted only in Chinese, and the file provides no mechanism for users to choose another language. This is a natural-language policy concern because the skill imposes a specific locale on all users without opt-in or documented regional justification.
This code hard-codes Chinese-language descriptions, usage text, and outputs, which effectively forces a specific language experience for all users. Under the policy, locale or language constraints should either be optional for the user or clearly documented as justified for a region-specific tool.
This markdown file contains only Chinese-language content and does not state that the skill supports multiple languages or that Chinese is an intentional, user-selected locale. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.
The file title and the entire document content are presented only in Chinese, with no indication that other languages or locales are supported. Under the policy, forcing a specific language without user opt-in can be a natural-language locale violation unless the constraint is documented and justified.
该 Markdown 文档全文以中文呈现，未见任何提示说明这是面向特定中文用户群体的区域性内容，也未提供语言选择或用户 opt-in。根据规则，强制单一语言/locale 而无选择机制可能构成自然语言政策问题。
No suspicious patterns detected.
