Security audit
Security checks for vulnerabilities and agentic risk
This is a mostly Chinese, document-only medical-device international business guidance skill with no executable behavior or hidden data access found.
Before installing, note that most guidance is in Chinese and should be treated as business/compliance reference only, not legal or regulatory advice. Use it for medical-device export strategy, and be aware that generic international business prompts may activate it unless your agent applies a narrower trigger policy.
The primary display name and descriptions are written to position the skill in Chinese, while the trigger phrases and operating guidance are also centered on Chinese-language invocation. The file includes an English description, but it does not explicitly offer users a choice of response language or state that language should follow user preference.
The trigger list contains very broad terms such as '国际业务', '出口', '渠道', '国际商务', and '本地化' that commonly appear in ordinary business conversations. This can cause the skill to activate outside its intended medical-device export context, creating context hijacking risk where specialized compliance or market-access guidance is injected into unrelated requests and may override more appropriate skills.
The natural-language content in this JSON file is entirely in Chinese, including the method description and all dimension notes, with no indication that users can choose another language or that the locale restriction is intentional. Under the policy, forcing a specific language without opt-in is a natural-language policy violation applicable to all file types.
Line L04 requires all branding attribution to use the fixed Chinese string 「注册老炮@MedXpert」 and forbids alternatives. This is a natural-language locale policy constraint, and the file does not offer any user choice or explain why a Chinese-only branding format is required.
The author field uses Chinese text in a manifest for an international business package, but the file provides no indication that the skill is intended only for Chinese-language users or that other locales are supported. Under the stated policy, forcing or assuming a specific language without opt-in or justification can be a natural-language policy concern.
SQP-3 applies to all file types and covers language or locale policy violations. This markdown skill content forces a specific language for all instructions and guidance, with no user opt-in or statement that the skill is intentionally limited to Chinese-speaking users or a China-specific workflow.
SQP-3 applies to all file types and includes language or locale policy violations. This file is fully written in Chinese and does not indicate that the skill is region-specific or that users can opt into this language, which may force a language choice on users.
This file presents all guidance exclusively in Chinese and does not indicate that other languages are available or that Chinese is an intentional user-selected option. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.
This SVG contains user-facing text entirely in Chinese, including the title and category labels, with no indication that language selection is optional or region-specific. Under the policy rule for natural-language violations, forcing a specific language without user opt-in is reportable across all file types.
No suspicious patterns detected.
