Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language Flutter reference skill with broad routing triggers but no hidden execution, exfiltration, persistence, or privileged behavior.
Install this if you want Chinese-language Flutter development help. Be aware that it may trigger on broad Dart/UI terms and may answer in Chinese even when another language would be preferable.
The skill is presented entirely in Chinese and does not state whether it can adapt to the user’s preferred language. In multi-language environments, this can cause mismatched responses, user confusion, and accidental disclosure of guidance in an unusable language, which degrades safe and reliable operation rather than creating a direct security compromise.
The trigger description is broad enough to activate on very common terms such as “Flutter”, “Dart”, “移动开发”, and “跨平台” without clear scoping boundaries. This can cause the skill to hijack unrelated conversations, leading to inappropriate invocation, reduced routing integrity, and possible overexposure of the skill’s instructions or content in contexts where it was not intended.
The trigger list is extremely broad and includes generic developer and UI terms such as 'Animation', 'Provider', '性能优化', and 'Material Design', which can cause the skill to activate outside narrowly intended Flutter-specific contexts. Overbroad activation can route unrelated user requests into this skill, increasing prompt hijacking risk, answer corruption, and unintended policy or behavior overrides from the skill content.
The output-format section hard-codes a Chinese-only response style and prescribes a rigid reply structure without checking the user's language preference. This can degrade safe operation by overriding user intent, causing confusing responses, and increasing the chance that higher-priority system behavior is displaced by skill-local instructions.
The entire document is written in Chinese and provides no indication that language selection is optional or limited to a China-specific or Chinese-only context. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation.
The file’s description and all instructional content are written exclusively in Chinese, with no indication that the language is optional or that the skill is region-specific. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- [Material Design for Flutter](https://flutter.cn/ui/design/material)
- [Material 3 Gallery](https://github.com/flutter/samples/tree/main/material_3_demo)
- [Material 3 Umbrella Issue](https://github.com/flutter/flutter/issues/91605)
- [ThemeData API](https://api.flutter.dev/flutter/material/ThemeData-class.html)
- [ColorScheme API](https://api.flutter.dev/flutter/material/ColorScheme-class.html)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- [Material Design for Flutter](https://flutter.cn/ui/design/material)
- [Material 3 Gallery](https://github.com/flutter/samples/tree/main/material_3_demo)
- [Material 3 Umbrella Issue](https://github.com/flutter/flutter/issues/91605)
- [ThemeData API](https://api.flutter.dev/flutter/material/ThemeData-class.html)
- [ColorScheme API](https://api.flutter.dev/flutter/material/ColorScheme-class.html)
The file description and body are written in Chinese, and the skill does not indicate that language selection is optional or that the locale restriction is intentional for a region-specific audience. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation.
This markdown file contains its description and instructional content in Chinese, and there is no indication that the user can opt into another language or that the skill is intentionally limited to a Chinese-language audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
This markdown file contains all instructional content in Chinese and does not indicate that users may choose another language or that the skill is intentionally limited to a Chinese-language audience. Under the language/locale policy, forcing a specific language without user opt-in is a natural-language policy concern.
The file description and all user-facing instructional content are written exclusively in Chinese, with no indication that other language options are available. Under the policy scope for natural-language violations, this can be considered a locale/language constraint that is not documented as optional or region-specific.
This markdown file presents the skill description in Chinese and continues with Chinese-language instructional content, which can constitute a language policy issue when no user opt-in or locale scope is stated. The file does not indicate that it is intended only for Chinese-speaking users or provide an alternative language option.
The manifest description is written entirely in Chinese, while the document title and code context are otherwise not clearly limited to a Chinese-only or region-specific audience. This creates a natural-language locale constraint without offering user choice or documenting that the skill is intentionally region-specific.
The manifest description is written entirely in Chinese and the rest of the skill content is also Chinese-language instructional material, with no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking context. This is a natural-language locale constraint that can conflict with organizational language-choice policies.
No suspicious patterns detected.