Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Chinese motor-assembly checklist and work-instruction helper with no evidence of hidden access, persistence, network use, or credential handling.
Use this only if Chinese motor-assembly work-instruction templates fit your workflow, and have qualified engineering and quality personnel validate any generated checklist before operational use. Run the script only when needed, choose any --output path intentionally, and note that the interactive mode appears to have a Python indentation/syntax error that may need repair before use.
The skill is described as generating assembly work instructions, but the content also introduces checklist generation, interactive confirmation, and record/output behavior not clearly disclosed in the declared purpose. This mismatch increases the risk that reviewers or users grant trust or permissions based on an incomplete understanding of what the skill does.
Suspicious Unicode normalization or mixed-script content
The skill invokes a script with an --output option that writes a checklist file, but it does not declare any tool scope or permissions. Undeclared file-write capability weakens reviewability and can enable unexpected artifact creation or downstream misuse if an agent is allowed to execute the referenced commands automatically.
The manifest description and the document body present the skill entirely in Chinese and describe it as generating assembly work instructions, but there is no indication that users may choose another language. Per the policy scope, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly justified.
Suspicious Unicode normalization or mixed-script content
This code file contains natural-language descriptions and usage instructions only in Chinese, which effectively forces a specific language for users. The policy permits locale constraints only when they are optional, user-selectable, or clearly justified as region-specific, none of which is stated here.
No suspicious patterns detected.
