Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed AI-product recommendation helper that uses watcha.cn and web searches, with no executable code, persistence, or local data access.
Install this if you want AI product recommendations informed by watcha.cn community data. For neutral or non-China-focused recommendations, ask the agent to compare watcha.cn results with global sources and to avoid using watcha.cn if you do not want those queries sent there.
The skill’s activation criteria are so broad that it can trigger for generic AI-tool queries that may not specifically require watcha.cn. This creates an overreach risk: the agent may route users into a third-party platform workflow unnecessarily, shaping recommendations through a single data source and external web lookups without explicit user consent or clear necessity.
The instruction set anchors the workflow to watcha.cn and explicitly directs the agent to use Chinese-platform data and Chinese-language search strategies by default, even when the user has not opted into China-focused sources. This can misalign results with user expectations, introduce regional bias, and potentially expose user queries to an external platform unnecessarily.
This JSON file contains natural-language prompts in both Chinese and English, but there is no indication that language or locale is user-selectable or intentionally constrained. Under the language/locale policy check, mixed or imposed language behavior can be a policy concern when no opt-in or justification is provided.
No suspicious patterns detected.
