Security audit
Security checks for vulnerabilities and agentic risk
This skill is a text-only PRD writing helper with no code execution, persistence, credential access, or hidden data handling.
Installers should treat this as a low-risk writing aid. The main caveat is language: it is designed to produce Chinese PRDs by default, so users expecting English or multilingual output should adjust the prompt or skill instructions.
The skill hard-codes Chinese output ('help the user design and write a PRD in Chinese') without checking the user's language preference or offering an opt-out. This can override user intent, reduce usability, and in some contexts cause misunderstanding or incorrect downstream use of requirements, though it is not a classic security exploit.
This markdown file presents all user-facing usage examples exclusively in Chinese. Under the policy rule for language/locale, forcing a single language without opt-in or justification can be a natural-language policy violation.
No suspicious patterns detected.
