Security audit
Security checks for vulnerabilities and agentic risk
This is a local citation-coverage checker with some documentation and metadata rough edges, but no evidence of hidden, persistent, destructive, or exfiltrating behavior.
Before installing, note that the tool is best suited for users comfortable with Chinese CLI output, and use --file or --text rather than the documented --input example. The broad allowed-tools metadata should be tightened by the publisher, but the inspected code itself only reads provided input and reports citation coverage locally.
The file presents the skill instructions entirely in Chinese and addresses AI agents through that language, with no indication that language choice is optional. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless clearly justified.
The natural-language content of the file is entirely in Chinese and does not indicate that users or agents may choose another language or locale. Under the policy, forcing a specific language without opt-in is a reportable natural-language policy concern.
The module docstring, CLI description, help text, and output strings are written exclusively in Chinese, which imposes a specific language/locale on users. There is no opt-in, language selection mechanism, or documentation indicating that the skill is intentionally limited to a Chinese-speaking context.
