Security audit
Security checks for vulnerabilities and agentic risk
This is a simple KYC checklist command-line skill with some documentation inconsistencies but no evidence of hidden network, persistence, credential, or destructive behavior.
Install only if you want a lightweight KYC checklist aid, not legal advice. Prefer invoking the declared script path, scripts/kyc_checklist_gen.py, and be aware that SKILL.md contains outdated usage flags and broad tool metadata that should be tightened by the publisher.
This markdown file contains natural-language instructions that effectively force a specific language for users and maintainers. Under the policy, language constraints should either provide user opt-in/choice or be clearly justified as region-specific, neither of which is stated here.
The top-level description says the skill should be used whenever KYC checklist capability is needed, which is broad enough to match loosely related conversations. Over-broad activation can cause the skill to run in contexts where users are only asking general questions, increasing unnecessary file access or process execution and leading to unintended disclosure or workflow actions.
The example trigger phrases like '开户要准备哪些材料' and '我的资料齐不齐' are ambiguous and could match casual informational queries rather than an intentional tool invocation. In an agent environment, this can lead to premature activation of a skill that may read local data files or start a compliance workflow without sufficient user confirmation.
The manifest declares the CLI entry point as scripts/kyc_checklist_gen.py, but the usage text instructs users to run python kyc_checklist_gen.py. This inconsistency can cause operators or orchestrators to execute the wrong file if a same-named script exists in the working directory or PATH, creating confusion and potential unintended code execution.
The argument parser description and all user-facing checklist/output strings are written only in Chinese, with no option to select another language or locale. This is a natural-language policy concern because the skill imposes a specific language on users rather than offering opt-in or a documented locale constraint.
The document is explicitly structured only in Chinese and English sections, with no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the constraint is justified as region-specific.
