Security audit
Security checks for vulnerabilities and agentic risk
This is a simple ASMR audio recommendation skill with disclosed external links and optional reminders, with minor trigger-scope and locale caveats.
Before installing, understand that this skill may be invoked for broad sleep, relaxation, anxiety, or focus requests and will recommend external audio links. Enable daily reminders only if you want a recurring notification, and verify the third-party playback links are appropriate for your language, region, and device.
The skill description contains broad wellness-trigger phrases such as sleep, relax, anxiety, focus, and meditation that are common in ordinary user conversation. This can cause unintended invocation and over-selection of the skill, especially because the skill also offers reminder setup and playback actions rather than only passive informational responses.
The usage examples include ambiguous everyday phrases like 'Help me relax' and 'I can't sleep' that do not necessarily indicate the user wants this specific skill. In a multi-skill environment, such broad examples increase the chance that the skill is invoked when the user may instead want medical guidance, conversation, or another wellness capability.
The entry on L5 uses a Chinese-language mini-program URI ('#小程序://大脑魔音/大脑魔音/...') with no accompanying explanation or alternative for users who do not use that language or ecosystem. This can be interpreted as forcing a specific language/locale experience without user opt-in.
No suspicious patterns detected.
