Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent Amap-based family route planner with disclosed API-key use and no evidence of hidden persistence, destructive behavior, or data exfiltration.
Install only if you are comfortable providing an Amap Web Service API key and sending the entered origin, city, route preferences, and needs to Amap. Use a scoped/quota-limited API key if possible, and avoid entering precise home addresses or personal identifiers.
The skill invokes code and requires both environment secrets and outbound network access, but the manifest does not declare an explicit tool scope such as permissions or allowed-tools. This creates an authorization ambiguity where the runtime may grant broader capabilities than reviewers or users expect, increasing the chance of unintended secret exposure or unreviewed external requests.
The skill description and all usage/output instructions are written as if the interaction and output are expected in Chinese, including mandated Chinese output examples and command arguments. There is no statement offering language choice or explaining that the skill is intentionally limited to Chinese users or a China-specific deployment context.
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.
<svg xmlns="http://www.w3.org/2000/svg" width="1000" height="902" viewBox="0 0 1000 902" role="img" aria-label="亲子半日游规划师 Demo 效果图">
<title>亲子半日游规划师 Demo 效果图</title>
<desc>展示亲子半日游规划师的家庭信息输入、路线故事、路线地图预览和家庭出行准备清单。</desc>
<image width="1000" height="902" preserveAspectRatio="xMidYMid meet" href="data:image/jpeg;base64,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
...[truncated 28 chars]
This code file contains user-facing natural-language output that forces a specific language/locale for all users. Under the policy, locale restrictions should either be optional via user choice or clearly justified as region-specific; neither is present here.
The natural-language strings in the SVG's aria-label, title, and description are entirely in Chinese, which imposes a specific language choice on users of this asset. There is no indication that the skill is region-specific or that users can choose a locale, so this appears to violate the language/locale policy.
Detected: suspicious.env_credential_access