Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese old-home renovation advice skill with local reference files and no evidence of hidden code, persistence, data access, or unsafe execution.
Install this if you want Chinese-language renovation guidance for older homes and second-hand homes. Treat pricing, property-buying, school-district, structural, electrical, waterproofing, and safety claims as general educational advice; verify major decisions with qualified local professionals, inspectors, engineers, or legal/real-estate advisers.
The trigger list contains many broad, generic renovation phrases that are likely to appear in ordinary conversations, increasing the chance the skill activates outside a clearly intended user request. Over-broad activation can cause context hijacking or unintended response injection, especially when the skill imposes a strong expert persona and domain-specific instructions once invoked.
The manifest describes a skill focused on answering renovation questions for old homes, second-hand homes, and developer-finished homes, including demolition, utilities, costs, structure safety, and kitchen/bath refresh. The "买房避坑类" section instead catalogs articles about whether to buy certain property types and school-district-driven purchases, which shifts from renovation/remodeling guidance to property purchase decision content.
This markdown file contains user-facing natural language exclusively in Chinese and does not provide any opt-in, alternative language, or justification that it is intended only for a Chinese-speaking or region-specific audience. Under the policy rule for language or locale constraints, forcing a specific language without user choice is a natural-language policy violation.
The instructions require the assistant to speak in a fixed Chinese colloquial style and to avoid industry jargon, but they do not give the user any option to choose another language or locale. This is a natural-language policy concern because the skill imposes a language/style preference without explicit user opt-in.
This JSON manifest-like file contains category names and article titles exclusively in Chinese, and there is no surrounding natural-language indication that users can choose another language or locale. Under the policy rule for language/locale constraints, forcing a specific language without opt-in can be a policy concern.
This markdown file presents all guidance exclusively in Chinese, and there is no indication that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the natural-language policy rule, forcing a specific language without user opt-in can be a policy violation.
SQP-3 applies to all file types and covers language or locale policy violations. This file presents all guidance only in Chinese without any opt-in, alternative language option, or justification that it is a region-specific resource, which can conflict with a policy requiring user language choice.
