Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent recipe-search and Obsidian-export skill with some ordinary file-write and browser-use considerations, but no evidence of deception or unsafe behavior.
Install this if you want a Chinese-recipe assistant that searches recipe sources and can save Obsidian notes. Before exporting, check the destination path and be aware that browser fallback may use an available browser profile/session for sites that need rendering or login.
The invocation text includes generic requests like "meal ideas," "weeknight cooking," and "recipe collection / curation," which overlap with normal conversation and could cause unintended activation. The file does not provide explicit trigger constraints or negative examples to clarify when the skill should or should not activate.
The skill specifies writing markdown files to fixed filesystem locations, but it does not require explicit user confirmation immediately before modifying disk. In an agent setting, this can lead to unintended local file creation or workspace pollution, especially if the skill is auto-invoked from a vague 'save this' or recipe-collection request.
This markdown template forces a specific language/locale for the skill output through its section headings and placeholder content. The file does not indicate that Chinese is optional, user-selected, or required for a justified region-specific use case.
This markdown schema hardcodes Chinese-language enumerations such as cuisine_region, category, and heat values, which imposes a specific language/locale on outputs. The file does not indicate that this is optional, user-selected, or justified as a region-specific skill, so it constitutes a natural-language policy concern.
The normalization rules state "Chinese default (English if user requests)," which imposes a language preference unless the user actively asks otherwise. This can violate language/locale neutrality policies when no prior user preference has been established.
The examples and recommended access patterns instruct users to construct searches primarily in Chinese, and one example explicitly appends '中文'. This imposes a language/locale preference in the skill guidance without stating that users may choose another language or that the constraint is optional.
No suspicious patterns detected.
