Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed expense-audit API integration with clear limits and no evidence of hidden execution, persistence, payment actions, or data exfiltration.
Before installing, confirm you are comfortable sending receipt images, OCR text, policy data, and claim details to the AI Skills platform. Prefer the product-specific EXPENSE_COMPLIANCE_API_KEY if you want tighter credential scope, and avoid putting full API keys or full tax/receipt identifiers into chat logs or exported reports.
The manifest description and the entire SKILL.md content are written in Chinese, and there is no statement offering another language or indicating that the skill is intentionally limited to a Chinese-speaking or China-specific compliance context. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
该 Markdown 文件全文以中文编写并直接规定 HTTP 请求行为，但未说明这是面向特定中文用户群体或区域合规场景，也未提供语言/locale 选择。根据规则，未经过用户选择而强制单一语言属于自然语言层面的策略违规。
This markdown file presents all operational instructions and schema descriptions only in Chinese. Under the stated policy, forcing a specific language without user opt-in or documented locale justification is a natural-language policy violation.
