Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple public tariff-policy lookup helper with no executable code, persistence, credential use, or hidden high-impact behavior found.
Installers should expect a Chinese-language skill that uses web sources to answer tariff-policy questions and should verify legal or trade decisions against official U.S. notices; clearer language-support documentation would improve usability but no malicious behavior was found.
The file consistently presents the skill name, description, usage examples, modes, and disclaimer only in Chinese. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly justified or alternatives are offered.
The skill name and description are entirely in Chinese while the skill targets U.S. tariff policy, but the metadata does not indicate that language selection is optional or that the locale restriction is intentional. This can violate language/locale policy when a skill implicitly assumes one language without user opt-in or clear justification.
No suspicious patterns detected.
