Security audit
Security checks for vulnerabilities and agentic risk
This is a travel-planning skill that uses disclosed search guidance to assemble luxury itineraries and booking links, with no hidden code, persistence, or credential handling found.
Install only if you want a Chinese-oriented luxury travel planning assistant. Expect it to use your destination, timing, budget, and preference details for travel searches and booking-link suggestions; avoid sharing unnecessary passport, payment, or account credentials in prompts.
The skill title and operational instructions are presented in Chinese, and the template later specifies '24小时中文管家服务' as a standard service element. There is no indication that users may choose another language, so the skill appears to force a specific language/locale without user opt-in.
This markdown file’s user-facing examples are entirely in Chinese, including headings, itinerary descriptions, and pricing summaries, with no indication that other languages are supported or that Chinese is optional. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
This markdown file presents nearly all substantive guidance in Chinese, which effectively forces a specific language on the user. The policy allows language constraints only when the skill offers user choice or clearly documents a justified locale-specific scope, neither of which appears here.
This markdown file instructs the skill to search flights, hotels, and experiences and to provide booking links, which may involve handling user itinerary preferences, destinations, and potentially sensitive travel details. The document includes a link-accuracy warning, but it does not disclose to users that external searches and booking-link generation may involve third-party services or sharing travel-planning data.
No suspicious patterns detected.
