Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward library catalog search tool that makes a disclosed network request to one public SRU endpoint and returns parsed JSON results.
Install this if you are comfortable with the skill sending your catalog search terms to the Khánh Hòa Provincial Library SRU service. Expect Vietnamese catalog content and some Vietnamese messages; no local credential, file, persistence, or destructive behavior was found.
The entire skill description is written in Vietnamese and does not provide an alternative language or indicate that the skill is intended only for Vietnamese-speaking or region-specific users. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy violation.
The skill documentation describes network access to an external SRU endpoint, but the manifest does not declare any tool scope such as permissions or allowed-tools. This creates a mismatch between declared and actual capabilities, which can undermine least-privilege controls and cause the agent runtime to permit or deny network behavior unpredictably.
This file uses Vietnamese-only comments, error messages, and output-facing text such as parser/help descriptions and runtime diagnostics, but does not provide any user opt-in or alternate locale handling. That can violate language/locale policy when a skill implicitly forces a specific language for interaction without giving the user a choice.
The comment at L027 describes aggressively raising the retrieval size to 150 to dig through many noisy newspaper records, while the broader skill purpose is to query and return structured catalog results subject to user limits. The code at L028 hard-codes fetch_limit=150 and only later trims results, which makes the comment partly describe behavior but also conflicts with the user-facing notion of maximum records as the effective retrieval bound.
No suspicious patterns detected.
