Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language meeting-minutes formatter that works on user-provided text and shows no hidden network, credential, persistence, or destructive behavior.
Install this if you want meeting notes organized in Chinese. Invoke it intentionally when pasting meeting content, especially confidential meetings, and review generated decisions, owners, and deadlines for accuracy before sharing.
All user-facing instructions, examples, and formatting guidance in this file are presented exclusively in Chinese. This imposes a language constraint without any opt-in, alternative language option, or justification that the skill is intended only for a Chinese-speaking or region-specific context.
The invocation examples are very generic ('帮我整理以下会议记录', '请整理成标准格式') and can easily overlap with ordinary user requests unrelated to explicitly selecting this skill. In agent environments that auto-route based on prompt similarity, this increases the chance of unintended invocation and accidental processing of sensitive meeting content without clear user intent.
This manifest specifies the skill language as "中文", which indicates a fixed language/locale choice. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern unless the locale constraint is explicitly justified or optional.
The code hardcodes toLocaleString('zh-CN'), which forces Chinese locale output regardless of the user's preferred language or environment. This is a natural-language/locale policy concern because the skill does not offer opt-in, fallback, or any justification that it is intended only for a Chinese-specific deployment.
No suspicious patterns detected.
