Security audit
Security checks for vulnerabilities and agentic risk
This is a Taobao Live operations guidance skill with no executable code or privileged behavior, though one sample sales line conflicts with its own compliance warning about absolute advertising claims.
Before installing, treat the ecommerce scripts as templates and remove unverifiable absolute claims such as 'best', 'number one', or 'lowest on the whole internet'. The skill otherwise appears to be static guidance only, with no code execution or access to private data.
The skill title and instruction text are written as direct Chinese-language operating guidance and frame the assistant's role entirely in Chinese. There is no indication that users may choose another language or that Chinese-only behavior is optional, which can violate language/locale policy requirements.
The skill’s best-practices section includes language encouraging claims like '全网最低没有之一', while its platform-rules section explicitly warns that absolute claims are prohibited. This inconsistency can cause the agent to generate policy-violating sales copy, exposing users to moderation, account penalties, or deceptive-marketing behavior.
No suspicious patterns detected.
