Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward coordinate-conversion helper with no evidence of hidden persistence, data theft, destructive behavior, or unrelated authority.
Install this if you need Chinese map coordinate conversion and are comfortable with Chinese-first output. Prefer installing with the included lockfile honored, and treat the test helper as developer-only code rather than a user-input execution surface.
The skill documentation is written entirely in Chinese, including usage instructions and examples, with no indication that users may choose another language. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is clearly documented and justified.
This code includes comments, errors, prompts, and output strings entirely in Chinese, which effectively forces a specific language for user interaction. Under the language/locale policy, that is a natural-language policy issue unless the skill offers opt-in language selection or clearly states it is intended only for a Chinese-language context.
The manifest describes a coordinate conversion skill, but this file imports child_process.execSync and builds shell command strings to invoke the CLI. Spawning subprocesses is not an inherent or justified capability for coordinate conversion itself; it is an execution capability beyond the stated purpose.
The file's natural-language test names and output expectations require Chinese strings such as 转换, 结果, and 不支持的坐标系. This enforces a specific language/locale in behavior verification with no indication of user opt-in or documented locale scope.
The skill documentation is predominantly written in Chinese and all interactive question text and user examples are specified in Chinese, which signals a default language constraint. Because the file does not explicitly offer users a language/locale option or justify the restriction as region-specific UI policy, this is a natural-language locale policy issue under the stated rule.
L206 states that GeoJSON is modified in place after conversion, implying side effects on the original object. However, this skill is documented and invoked as a node index.js command that processes input and returns output, so it cannot mutate the user's original in-memory object across the CLI boundary; at most it can emit transformed output.
The dependency uses a caret version range (^1.0.7), which permits automatic installation of newer minor and patch releases. If the upstream package is compromised or a breaking/malicious update is published within the allowed range, consumers of this skill could receive unreviewed code during install or deployment.
"bd09"
],
"dependencies": {
"gcoord": "^1.0.7"
},
"author": "zhangyuting",
"license": "MIT"
This plain-text file uses Chinese headings and labels such as "坐标转换测试数据" and "格式: 经度,纬度" with no indication that the skill is region-specific or that users may opt into this language. Under the policy rule for natural-language violations, forcing a specific language without opt-in can be a locale-policy issue.
The test helpers build a shell command by interpolating args directly into a template string passed to execSync. If any test input contains shell metacharacters or attacker-controlled content, this can lead to command injection during test execution, which is especially relevant because several tests pass complex quoted input strings through this helper.
Detected: suspicious.dangerous_exec