Security audit
Security checks for vulnerabilities and agentic risk
This is a read-only Go security audit checklist with a Chinese-language body, and I found no hidden execution, credential use, or persistence.
Install only if Chinese-language audit guidance is acceptable. Treat the real-world case notes and placeholder CVE/CVSS values as review aids to verify, not authoritative vulnerability records.
The skill content switches into Chinese for the activation instruction and subsequent guidance, but the file does not state that this skill is region-specific or provide an opt-in language choice. Under the policy, forcing a specific language or locale without user opt-in is a natural-language policy violation.
The document body is presented in Chinese starting at L003 and continues throughout the file, with no indication that the user can choose another language or that the skill is intentionally region-specific. This is a natural-language locale policy concern because it imposes a specific language by default rather than offering opt-in or documenting the constraint.
No suspicious patterns detected.
