Security audit
Security checks for vulnerabilities and agentic risk
This is a documentation-only skill for generating tests, with workspace writes aligned to its stated purpose and no hidden execution or persistence.
Before installing, understand that using this skill may create test files or coverage reports in your project. Prefer dry-run/preview first and review diffs before committing generated tests.
The manifest description and main documentation are written entirely in Chinese, indicating a fixed language presentation. There is no statement that the skill is China-specific or that users may opt into another language, which can violate a language/locale choice policy.
The skill explicitly recommends generating tests and saving files into the project workspace, but it does not clearly warn users that this may create or overwrite files in the repository. In an agentic context, undocumented write behavior can lead to unintended workspace modification, noisy diffs, broken builds, or accidental alteration of trusted test assets.
No suspicious patterns detected.
