Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed remote MCP integration for comparing cruise products, with no local code, persistence, credential handling, or destructive behavior found.
Before installing, users should be comfortable sending cruise search criteria to the disclosed CruiseSkillBridge/olavacations MCP endpoint. Non-Chinese-speaking users may find the documentation incomplete or hard to review, and the publisher should clarify localization and replace remaining template text.
The skill description and installation guidance are entirely in Chinese, with no indication that the skill is region-specific or that users can choose another language. This can violate language/locale policy when a skill imposes a language without user opt-in or justification.
The manifest description and main explanatory text are written in Chinese, with no indication that the skill supports other languages or that Chinese is a justified region-specific requirement. This can violate language/locale policy expectations when users are not given an opt-in or choice.
The manifest description is written entirely in Chinese and provides no indication that language selection is optional or that the skill is intended only for a Chinese-speaking locale. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
This markdown file presents the skill name, description, and setup instructions entirely in Chinese, without offering a user language choice or explaining that the skill is intended only for a Chinese-speaking audience. Under the policy rule for natural-language violations, forcing a specific language without opt-in is a locale/language policy concern.
