Security audit
Security checks for vulnerabilities and agentic risk
This is a Markdown-only Bolt.new usage guide with no executable code or hidden agent behavior, though users should be careful before publishing generated apps publicly.
Installers should treat this as a Chinese-language Bolt.new guide. Before using any one-click deploy workflow, confirm the app is meant to be public and remove secrets, API keys, private sample data, and unfinished internal content.
The file consistently presents the skill description and instructions in Chinese, but it does not indicate that the language is optional or limited to a Chinese-speaking audience. Per the policy, forcing a specific language without user opt-in is a natural-language policy concern.
The skill promotes one-click deployment to a public Netlify URL but does not clearly warn users that this can expose unfinished applications, embedded secrets, test data, or internal prototypes to the public internet. In a developer-assistance context, this omission increases the risk of accidental data exposure and insecure publication of code or services.
No suspicious patterns detected.
