Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Twitter/X image-generation guide with no hidden execution, credential access, or unsafe persistence.
Before installing, be aware that the examples default to English and Twitter/X-specific dark-mode design assumptions. Adjust locale, wording, and style to your audience, and review any saved templates before reusing them.
The example generate_image call hard-codes locale: "en", which imposes a specific language/locale in the skill instructions. Because the file does not offer an opt-in or alternative locale choice, this is a natural-language policy concern under the language/locale rule.
This example again specifies locale: "en", reinforcing an English-only default in the skill guidance. The file does not state that users may choose another language or that the constraint is justified for a region-specific use case.
The file consistently frames design guidance specifically for Twitter/X, including platform-specific assumptions like dark-mode usage and mobile preview behavior. Under the policy category, this can be read as forcing a single platform context without any stated opt-in or alternative, which may limit user choice in a natural-language instruction file.
This markdown file includes example calls with locale: "en", which presents English as the default output language without any note that users may choose another locale. Under the policy rule for natural-language violations, forcing a specific language without opt-in can be a locale policy issue.
The thread header example sets locale: "en" with no accompanying explanation that this is only illustrative. Repeating a single mandatory locale across examples can imply that the skill requires English rather than offering language choice.
This example explicitly specifies locale: "en" and does not document any region-specific or compliance reason for restricting output language. That can conflict with the requirement not to force a language or locale without user opt-in.
The sample invocation uses locale: "en" as a fixed setting with no user-choice language guidance. Because the file is instructional markdown, this can be read as a default policy rather than an optional example.
No suspicious patterns detected.
