Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language product positioning analysis skill with no code execution, persistence, credential handling, or hidden data access.
Installers should expect this skill to answer primarily in Chinese and to activate on broad marketing-analysis terms; review trigger behavior if you use multiple business strategy skills. No security-sensitive access or persistence was found.
The natural-language description is presented as a Chinese-first skill and describes output as a fixed '产品定位分析报告' without indicating that users may choose their preferred language or locale. Under the policy, forcing a specific language without opt-in can be a locale-policy violation.
The trigger list is broad and includes generic business-analysis terms such as '市场分析', 'SWOT', 'STP', and '4P', which can match many unrelated user requests and cause unintended activation. This is not code-execution dangerous, but it can lead to misrouting, incorrect skill selection, and degraded trust or policy bypass if a more appropriate skill should have handled the request.
The skill name, description, workflow, and output requirements all assume Chinese as the interaction language, but the file does not state that Chinese output is optional or limited to a China-specific use case. This can violate language-choice policy because it effectively forces a specific language without user opt-in.
No suspicious patterns detected.
