Security audit
Security checks for vulnerabilities and agentic risk
This is a transparent China travel helper with some overly broad triggers, but I found no hidden code, persistence, credential access, or destructive behavior.
Before installing, consider that this skill may answer generic help, emergency, translation, or taxi requests with China-specific travel information. Verify current visa, payment, hospital, and emergency details from official or local sources, especially because the static guide dates from 2024.
The metadata explicitly sets the skill language to "en", which imposes a language preference without indicating that users may choose another language. This may violate language or locale policy where user language choice should be offered unless the restriction is clearly justified.
The entry-point trigger "help" is extremely generic and can cause the skill to activate during unrelated conversations, increasing the chance that it intercepts user requests outside its intended travel scope. In a travel assistant that includes emergency and payment guidance, accidental activation could produce irrelevant or misleading advice at the wrong time.
The standalone trigger "emergency" lacks domain scoping and may activate for any emergency-related discussion, not just China travel situations. Because this skill provides emergency numbers and medical/police guidance, unintended activation could override or distract from more appropriate local emergency assistance.
The trigger "translation" is too broad and can match many ordinary requests unrelated to this specific skill. Since the skill's translation module is optimized for travel artifacts like signs, menus, and medicine labels, broad activation may lead to context-inappropriate outputs or unnecessary tool use.
The Emergency Help module uses vague standalone triggers such as "help," "emergency," and "lost," which can collide with many ordinary user utterances. In an emergency-oriented module, accidental invocation is more dangerous because it may surface location-specific safety instructions that are inapplicable or delay better assistance.
The trigger list for Getting Around includes the single word "taxi", which is broad and could be mentioned in many contexts not intended to invoke this module. The file does not define boundaries or exclusion conditions for this trigger.
No suspicious patterns detected.
