Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed code-change risk assessment workflow with no executable payload or hidden persistence.
Install this only if you are comfortable using a Chinese-language workflow and granting it access to the repositories it will analyze. Use a least-privilege GitHub token and review any generated refactoring plan or diff before applying changes.
The README presents all user-facing instructions, examples, and outputs exclusively in Chinese. Under the policy rules, forcing a specific language without user opt-in is a natural-language policy concern unless the locale limitation is explicitly justified or alternatives are offered.
The description and trigger configuration are entirely in Chinese, and the listed invocation phrases require Chinese phrasing to activate the skill. This creates a language/locale constraint without any opt-in, alternative language support, or justification that the skill is intended only for a Chinese-specific environment.
This manifest uses Chinese for the user-facing description and all trigger phrases, which establishes a language constraint for invocation and use. There is no indication that users may choose another language, nor any documented reason that the skill is intentionally region-specific, making this a natural-language locale policy issue.
No suspicious patterns detected.
