Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese daily/weekly report formatter with no evidence of hidden access, persistence, network use, or unsafe system actions.
Install this if you want Chinese-language daily or weekly report templates. Be aware that it does not offer alternate output languages and the advertised detailed format appears to be the same as the general format.
The manifest description and the entire user-facing skill instructions are written only in Chinese, and the skill framing implies report generation in that language by default. The file does not state that users may choose another language or locale, which can violate language/locale policy requirements for user choice.
The manifest explicitly sets the skill language to "中文", and the description is also written only in Chinese. Per the policy, fixed language constraints should be flagged unless the skill offers a language choice or clearly documents a justified locale-specific restriction, which is not present here.
This JavaScript skill generates all titles, section headers, labels, and CLI usage text in Chinese, including the primary report formats and user-facing strings. Because the file provides no opt-in, language selection, or documented region-specific justification, it violates the language/locale policy criteria for natural-language constraints.
The option parsing and comments indicate support for a separate 'detailed' format, but generateDetailedFormat simply delegates to generateGeneralFormat and the inline comment states they are the same. This contradicts the documented/declared behavior of offering a distinct detailed format.
No suspicious patterns detected.
