Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Socratic-question helper that prints guidance and prompts, with no hidden access, network use, persistence, or data handling found.
Install this if you are comfortable with a mostly Chinese-language Socratic dialogue helper. It appears low risk: the included scripts only display prompts and guidance, and I found no hidden data access, remote execution, or persistence.
The skill title and operational description are written primarily in Chinese, and the guidance does not tell users they may interact in another language or choose their preferred locale. Because this is a natural-language behavior/policy issue that can constrain language use without opt-in, it fits the locale-policy violation category.
The manifest description is written entirely in Chinese and presents the skill in a single language with no indication that users can opt into another locale. Under the policy, forcing a specific language without user choice can be a natural-language policy violation unless the locale restriction is documented and justified.
The user-facing names, descriptions, and all question prompts are exclusively in Chinese, which implies the skill is intended to operate in a single language. Under the policy, forcing a specific language without user opt-in or documented justification is a natural-language policy violation.
The help output and user-facing guidance are written in Chinese, and the script does not indicate that language selection is optional or configurable. This can violate a language/locale policy when users are not explicitly given a choice of language.
This markdown guide is written entirely in Chinese and presents the interaction pattern in that language without indicating that users may choose another language. Under the policy for natural-language violations, forcing a specific language without user opt-in is a reportable issue unless the locale constraint is explicitly justified.
