Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed food-ordering workflow guide that requires user confirmation before any order is placed.
Before installing, understand that this skill may guide an agent through real food purchases using vendor connectors and delivery address information. Use it only with connectors you trust, review the full cart and address carefully, and do not confirm unless the vendor, total, ETA, and cancellation/payment terms are correct.
The example user input "Place it quickly." is highly generic and could match many unrelated conversations if used as an activation cue or invocation example. The file does not provide constraints or exclusion conditions that narrow when this phrasing should invoke the skill.
The manifest describes a unified food ordering assistant for India that supports Swiggy and Zomato workflows. This setup file instructs operators to check and potentially use EatSure, magicpin, ONDC, Blinkit Bistro/Zepto Cafe, and also marks 'booking/cancellation support' as supported actions, which materially broadens the described scope beyond the manifest.
The file names and describes the skill as an India food ordering assistant, which is a locale-specific constraint expressed in natural language. While regional scope can be legitimate, this file does not explicitly frame the restriction as a documented regional limitation or provide any user opt-in/choice regarding locale.
No suspicious patterns detected.
