Security audit
Security checks for vulnerabilities and agentic risk
This is a simple nearby-bar lookup skill with disclosed location use and no executable code or hidden behavior.
Before installing, note that the skill uses precise location to find nearby bars and may cache a coarse location briefly. It should only be used after location permission, and ambiguous "nightlife" requests should be clarified if the user may mean something other than bars.
The trigger term "nightlife" is broader than the stated skill scope of finding nearby bars, so the agent may invoke this skill for requests about clubs, events, adult entertainment, or general evening activities that it is not designed to handle. This can cause incorrect routing, over-collection of location context for unrelated intents, and unintended responses in sensitive contexts.
The document presents most operational content in Chinese while also embedding English trigger phrases and labels, but it does not state that the skill is region-specific or that users can choose their preferred language. This can amount to an implicit language policy that is not justified or opt-in.
No suspicious patterns detected.
