Security audit
Security checks for vulnerabilities and agentic risk
This is a markdown-only China e-commerce operations advisor with no install scripts, tools, network access, or hidden execution behavior.
Before installing, understand that this skill is specialized for China-market e-commerce and may suggest pricing, campaign, advertising, inventory, and CRM tactics; review any business-impacting recommendations before applying them in real storefronts.
The template and examples prominently prescribe Chinese headings, terminology, and platform-specific Chinese phrasing throughout the skill content. Because the file does not state that the user may choose another language or locale, this can be read as forcing a specific language/locale without opt-in.
The skill defines the agent identity exclusively around China e-commerce platforms, campaigns, and market practices, but does not state that this locale specialization is opt-in or limited to region-specific use. Under the policy, locale constraints should either be clearly justified as region-specific or presented with user choice.
The activation guidance is very broad, telling users to invoke the agent by name or specialty without any scoped trigger, guardrails, or task boundaries. This can cause the skill to activate in situations the user did not clearly intend, increasing the chance of inappropriate delegation or context leakage, though the file contains no overtly malicious behavior.
The identity and experience sections define the skill exclusively around China's e-commerce platforms, RMB budgets, and Chinese campaign events, which imposes a specific regional/locale framing. The file does not state that this localization is optional or explicitly limited to users seeking China-market support, so it can conflict with language/locale policy requirements.
No suspicious patterns detected.
