Security audit
Security checks for vulnerabilities and agentic risk
This is a document-only Chinese-language compliance aid with no executable behavior, network access, persistence, or credential handling.
Install this if you are comfortable using Chinese-language compliance templates and remember it is only drafting support, not legal advice. Refresh or verify the package attestation if you rely on publisher integrity hashes, because the inspected SKILL.md hash does not match the hash claimed in the included manifest/attestation.
The display name, description, headings, trigger examples, and all user-facing guidance are presented in Chinese throughout the file. The skill does not indicate that Chinese is optional, user-selected, or justified as a region-specific constraint, which creates a natural-language policy concern for skills that should not force a specific language without opt-in.
Line L04 instructs that branding must uniformly use a specific Chinese name format and forbids alternatives, which is a natural-language policy constraint applied unconditionally. Because the file does not offer locale/language choice or explain a region-specific necessity, this can be read as forcing a specific language/labeling convention without user opt-in.
The manifest references multiple resource filenames written only in Chinese, such as GDPR/HIPAA materials and data-export assessment templates. In the absence of any indication in this file that the skill is region-specific or that users can choose language, this suggests a fixed-language experience that may violate locale-choice policy.
No suspicious patterns detected.
