Security audit
Security checks for vulnerabilities and agentic risk
This skill appears to be a disclosed remote MCP for searching cruise products, with no local code, persistence, or hidden instructions in the inspected artifacts.
Before installing, users should understand that this is a hosted cruise-product MCP and their cruise-search queries may be sent to the listed remote service. Non-Chinese-speaking users may need translation because the package description and README are Chinese-only.
The manifest description is written entirely in Chinese and presents the skill in that language without indicating that users can choose another language or that the skill is intended only for a Chinese-speaking or region-specific audience. This can violate language/locale policy when the skill effectively defaults to a specific language without user opt-in.
The README presents the skill description exclusively in Chinese, which can impose a specific language on users without offering an alternative or explicit opt-in. This matches the policy category for language or locale constraints expressed in natural language.
The manifest description and README text use Chinese exclusively, which can amount to a language/locale policy issue when no user opt-in or alternative language is provided. The file does not indicate that the skill is intended only for a Chinese-speaking region or audience, nor does it offer a language selection.
