Security audit
Security checks for vulnerabilities and agentic risk
This skill is a local Xi'an home-renovation budget calculator with no evidence of hidden access, persistence, network use, or destructive behavior.
Before installing, treat the estimates as regional Chinese-language guidance for Xi'an and not as a binding quote. Be aware that floorplan details are not actually used by the calculator, and 半包/全包 input mainly affects labeling rather than changing the computed ranges.
This JavaScript file contains multiple user-facing strings exclusively in Chinese, including error messages and the main response text. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified, which is not present in this file.
The manifest says the calculator takes 户型 and 半包/全包 as budgeting inputs, but parseQuery only extracts area, old/new, package type, and level, with no户型 parsing at all. Although packageType is parsed and echoed in results, the calculation path in calculateDecorationBudget always computes both half-package and full-package ranges from the same tier and never branches on packageType, so that stated input does not affect estimation behavior.
This markdown file presents all instructions, labels, and guidance exclusively in Chinese. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation when no language choice or explicit region-specific justification is provided.
The text instructs downstream use to generate responses for homeowners using a specific Chinese phrasing style, and the file as a whole is written only in Chinese. Under the policy, forcing a specific language or locale without offering user choice can be a natural-language policy violation unless it is explicitly justified as region-specific output behavior.
