Security audit
Security checks for vulnerabilities and agentic risk
This is a benign Chinese-language wizard for helping users manually set up workspace sync commands, with no automatic execution, installation, persistence, or data access in the artifact.
Before installing, note that the skill appears intended for Chinese-speaking users. If you use its generated rsync, sshfs, or Syncthing commands, review paths, sync direction, exclusions, and credential handling before running them manually, especially to avoid unintentionally copying secrets or overwriting files.
The skill content is written entirely in Chinese, including section headings and operating instructions, with no indication that users may choose another language. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be a locale or language policy issue.
The file begins with Chinese-only instructional text and provides a fixed Chinese conversation template, which implicitly constrains the interaction language. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified.
The README presents the skill instructions entirely in Chinese, which imposes a specific language on users without any opt-in or alternative-language note. The policy explicitly calls out language or locale constraints as findings when no user choice is offered.
