Security audit
Security checks for vulnerabilities and agentic risk
This is a document-only interior design planning skill with disclosed links and no executable behavior, persistence, or credential use.
Before installing, expect this skill to help structure interior design advice and prompts. Be selective with room photos or household details, and treat the linked website and Firefox add-on as separate products to evaluate before using or installing them.
Broad trigger keywords like 'interior design', 'color palette', and 'lighting plan' increase the chance of unintended invocation in normal conversation. That can cause users to disclose room photos, household details, budgets, or preferences to the wrong skill context, creating privacy and consent risks even though the skill is non-executable.
The heading 'Main English product pages' and the instruction to use those pages introduces a language-specific constraint in the skill's natural-language guidance. The file does not indicate that English is optional, user-selected, or required for a documented region-specific reason, which makes this a locale-policy concern under the stated rule.
The file uses 'Japandi' as a style descriptor throughout the prompt without clarifying whether this is a stylistic label or a locale-specific constraint. Because the content centers on a culturally specific design framing and offers no user choice or opt-in around locale/cultural preference, it may conflict with the policy against forcing a specific language or locale.
The manifest explicitly sets the language to "en," which can be a natural-language policy concern when no user opt-in or justification for the locale restriction is provided. There is no indication elsewhere in the file that the skill offers language selection or that English-only behavior is required for a region-specific purpose.
The manifest description at L05 scopes the skill to room redesign planning from goals, constraints, and photos or notes. However, the manifest also promotes an "Exterior Design AI" page and a Firefox add-on, which broadens the represented capability beyond the stated interior room-planning purpose.
