Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent Chinese novel-writing helper, but it asks for recurring automatic file changes and Desktop copying without clear user control.
Install only if you want this skill to manage a specific local Chinese novel project. Before using it, confirm where it may read and write files, disable or explicitly approve any hourly Cron-style automation, and avoid letting it copy files to the Desktop unless you requested that behavior.
The skill description claims broad applicability for general novel-writing tasks without clear activation boundaries, making it more likely to trigger on ordinary writing requests and then perform its full workflow. In this skill, that workflow includes local file reads/writes and periodic automation, so over-broad triggering increases the chance of unintended filesystem interaction.
The workflow mandates reading and writing several local manuscript and memory files on every run, yet does not disclose this clearly to the user or obtain consent. Because these files encode persistent state, the skill can silently inspect and alter local content beyond a single response, increasing privacy and integrity risks.
The skill instructs automatic hourly execution with chapter generation, memory updates, outline updates, and copying files to the desktop, but provides no user-facing consent or safeguards. This creates a risk of repeated unauthorized local file modification and propagation of generated content into user-visible locations.
The natural-language instructions, title, and workflow are all presented in Chinese, with no indication that users may choose another language. This can be a language policy concern when a skill implicitly forces one locale without user opt-in.
