Security audit
Security checks for vulnerabilities and agentic risk
This skill is a real date-spot planner, but it handles sensitive location and relationship details with under-disclosed sharing and coaching behavior.
Review this skill carefully before installing. Use only coarse meeting areas unless exact routing is necessary, do not enter another person's precise location without permission, and avoid generating shareable CSV or HTML artifacts unless you understand they may contain addresses, routes, and meeting plans.
The visible natural-language instructions and examples are written to operate in Chinese, and the trigger/interaction guidance assumes Chinese phrasing without offering any user opt-in or language choice. Under the policy, forcing a specific language or locale without choice is a natural-language policy violation unless clearly justified as region-specific.
The manifest says the skill triggers for scenes such as "找个地方聊天" and similar phrasing. That phrase is common everyday speech and the description does not provide exclusion conditions or tighter scope, which could cause unintended invocation outside the intended date-spot recommendation context.
The skill processes precise location inputs from one or two people and sends them to external AMap APIs for geocoding, routing, midpoint calculation, weather lookup, and nearby search, but the description does not warn users that this location data will be transmitted off-platform. In a dating/meeting context, this omission is more sensitive because it can involve another person’s whereabouts and commuting patterns.
The skill metadata and output section present the tool as producing pure text recommendations, but the instructions additionally require generating CSV and interactive HTML artifacts with embedded map/navigation features. This expands the data handling and execution surface in ways not clearly disclosed, increasing the chance of unexpected artifact creation, link generation, and external API exposure beyond the user’s reasonable expectations.
The advertised purpose is location recommendation, but the skill substantially expands into interpersonal dating coaching, behavioral steering, and gender-targeted advice. This scope creep increases privacy and safety risk because it encourages collection and use of personal and relational data unrelated to the core map-search function, and in context is paired with instructions to conceal parts of the strategy from the other party.
The skill contains a detailed staged behavior guide for rapport-building, reading signals, and steering the interaction, while explicitly instructing that some strategic content be hidden from the other person. In this dating context, that covert influence framing increases the risk of manipulative social-engineering assistance, especially when combined with personalized situational advice and logistics planning.
The skill explicitly instructs the agent to ask the user’s gender in order to tailor advice on behavior, gifts, payment, and messaging, but gender is not necessary for recommending meeting places. Collecting this attribute without necessity violates data minimization principles and creates avoidable sensitivity and profiling risk.
