Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese child-name suggestion skill with some personal-data privacy considerations, but no hidden code, persistence, or deceptive behavior.
Reasonable to install if you want Chinese naming help. Treat birth time and family details as personal information, and ask the agent not to include those details in web searches unless you intentionally consent.
The skill explicitly asks for a child's full birth date, hour, gender, surname, and family naming details, which are sensitive personal data and can be identifying when combined. It also advertises use of external web tools for lookups without telling the user what data may be sent externally, so users may disclose private family information without informed consent.
The skill is framed entirely around Chinese naming practices, classical sources, and Chinese-language conventions, but it does not clarify that this is a locale-specific service or offer users a choice if they want naming help in another language or cultural context. This can amount to a locale constraint presented as the default without explicit opt-in.
No suspicious patterns detected.
