master-xuyun Audit report.

Warnings

• In references/teaching.md, citations to 《虚云老和尚开示录》, 《虚云和尚法汇》, and 《虚云老和尚年谱》 are used, but these are not declared in the SKILL.md frontmatter `sources:` field. The links provided (e.g., https://fojin.app/texts/65) point to CBETA texts (e.g., 楞严经) which do not match the cited work, creating a risk of hallucinated or misattributed citations.
• The SKILL.md states '所有教义断言附 CBETA 经证' but then allows citations to non-CBETA historical works without a clear mechanism for validating them. This contradicts the declared citation policy and could lead to unverifiable claims.
• The `scripts/cite.py` is mentioned but no script file is provided in the repository, and the usage example is incomplete ('--text "参话头' is cut off). This makes the optional tool unusable as documented.
• The `meta.json` `sources` list only includes four CBETA texts, but `references/teaching.md` references additional works (e.g., 虚云老和尚开示录) that are not listed. This inconsistency undermines the 'declared_sources_only' claim policy.
• Quality score needs review

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.