Security audit
Security checks for vulnerabilities and agentic risk
This skill coherently provides a disclosed, API-backed presentation generation workflow, with document upload and billing risks that users should understand before use.
Install only if you are comfortable sending the selected source material to the AI Skills service and paying the documented API charges. Use a product-specific key if you want tighter separation, avoid pasting full keys into chat, and review generated outlines and files before sharing them externally.
The manifest description is written as a usage directive in Chinese, and the rest of the skill instructions are also exclusively in Chinese. There is no indication that users may choose another language or that the Chinese-only constraint is required for a region-specific purpose, which makes this a natural-language locale policy concern.
The document title and all behavioral rules are written only in Chinese, with no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without opt-in is a natural-language policy concern.
This markdown file contains all user-facing instructions in Chinese, which can amount to a language/locale policy issue when no opt-in or alternative language is provided. The stated policy calls for flagging skills that force a specific language without user choice unless the locale constraint is clearly justified.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
POST /api/v1/presentation-generation/presentation.generate；GET /api/v1/presentation-generation/presentation.generate/tasks/{task_id}curl -sS -X POST "$BASE/presentation-generation/presentation.inspect" \
-H "Authorization: Bearer ${PRESENTATION_GENERATION_API_KEY:-$AI_SKILLS_API_KEY}" \
-H "Content-Type: application/json" \
-H "Idempotency-Key: $REQUEST_UUID" \
The file’s operational instructions and interface descriptions are entirely in Chinese, and there is no accompanying note that the skill is limited to Chinese-speaking users or that users can choose another language. Under the policy for natural-language violations, forcing a specific language without user opt-in can be a locale policy issue.
No suspicious patterns detected.