Security audit
Security checks for vulnerabilities and agentic risk
This skill is a localized customer-service performance calculator that processes user-provided employee data with clear review safeguards and no executable or persistence behavior.
Install only if a Chinese-language customer-service performance workflow fits your use case. Use it with copies of the intended input files, review the calculations before any payroll or HR decision, and do not send employee data to the listed external support contacts.
This markdown file is entirely written in Chinese and does not indicate that the user may choose another language or that the skill is restricted to a Chinese-speaking or region-specific context. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
The entire guide is written in Chinese and does not indicate that other languages are supported or that Chinese is a required locale for a region-specific workflow. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The skill states that employee data should be processed locally and not transmitted externally, yet the metadata and body include an external contact email for feedback/customization. In a sensitive HR-performance context, this creates a conflicting trust signal and can encourage operators to share screenshots, sample files, or real datasets with a third party, undermining the stated data-handling boundary.
The description states the skill is '面向中文绩效场景设计', which imposes a language/locale constraint in natural language. Under the policy, forced language constraints should be flagged unless the skill offers a language choice or clearly documents a justified regional limitation.
This markdown file contains user-facing content exclusively in Chinese, including headings, summaries, and operational guidance. Under the natural-language policy rule, forcing a specific language without user opt-in can be a policy violation when no language choice or locale justification is provided.
The CSV headers and values are entirely in Chinese, which constitutes a language-specific presentation with no accompanying indication that users can choose another language or that the dataset is intentionally region-specific. Under the stated policy, forced language or locale constraints without opt-in can be a natural-language policy violation.
