Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent travel-planning assistant that uses Amap route APIs and does not show hidden execution, persistence, or data misuse.
Before installing, understand that travel addresses, points of interest, and generated route/map data will be sent to Amap services using your AMAP_API_KEY. Avoid entering sensitive private locations unless you are comfortable sharing them with that provider.
The manifest description is entirely in Chinese and does not indicate that users may interact in other languages or choose their preferred language. Under the policy for natural-language violations, forcing a specific language without user opt-in is in scope unless the locale constraint is clearly justified.
The core behavioral instruction begins in Chinese and the document continues primarily in Chinese, but there is no statement that users can choose another language. This creates a natural-language policy concern because the skill appears to default to a specific language without explicit opt-in or justification.
