cs-xiaohuang-skill Audit report.

Warnings

• SKILL.md references several supporting files (assets/reference-xiaohuang.png, references/style-dna.md, references/prompt-template.md, references/qa-checklist.md, etc.) that are not fully shown in the excerpt; if any are missing from the packaged skill, core workflows will break.
• The skill instructs agents to read a reference image as the identity anchor. If that image ever contains embedded text or instructions, an agent could treat it as guidance; this is a minor prompt-injection surface, though no dangerous actions are requested.
• Quality score needs review
• Stars/forks activity: 118 stars, 13 forks; issue activity unavailable in current metadata

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.