Security audit
Security checks for vulnerabilities and agentic risk
This skill is a structured software-development workflow that writes project planning documents, code, and tests in ways that fit its stated purpose.
Install this only if you want the agent to follow a Chinese-language, document-driven development workflow. Expect it to create or update project files in the repository root and to run local verification commands when implementing tasks; review generated plans before approving implementation.
The skill content is written as a fixed Chinese-language role and workflow, with no indication that users may choose another language. This can constitute a language/locale policy issue because it implicitly enforces a specific language without opt-in or documented justification.
The skill explicitly instructs the agent to create and update repository files in the project root, but it does not require user confirmation or warn that local files will be modified. In an agent context, this can cause unintended workspace changes, overwrite existing documentation, or normalize silent file mutation before the user has clearly consented.
The skill requires running terminal tests and troubleshooting local runtime issues, but it does not disclose that local commands will be executed or require consent before doing so. This increases the risk of unsafe command execution, environment modification, port conflicts, or unintended interaction with the user's machine and services.
No suspicious patterns detected.
