Security audit
Security checks for vulnerabilities and agentic risk
This is a document-only allergy-season room routine skill with clear medical safety boundaries and no code, network, credential, persistence, or hidden execution behavior.
Before installing, users should understand that this skill provides practical home-routine suggestions, not medical advice. It is appropriate for low-risk room habits, but users should seek urgent local care for breathing trouble, swelling, chest tightness, severe reactions, or symptoms that feel dangerous.
Line L08 states 'Public-facing documentation is English only,' which is a natural-language locale restriction. The file does not provide user opt-in, multilingual support, or a documented region-specific justification for this constraint.
Line L15 says 'No CJK characters are present,' which imposes a character-set and language-related restriction rather than a functional or safety requirement. No user opt-in or justified business/regional necessity is given, so this appears to violate language/locale policy expectations.
Line L23 requires 'English/ASCII only,' which is a natural-language and character-set limitation. The file does not explain why non-English or non-ASCII content would be disallowed, nor does it offer user choice or a region-specific rationale.
The manifest sets the skill language to "en", which can constitute a language/locale policy issue when the skill appears generally applicable and does not indicate user opt-in or a documented regional justification. In this file, there is no accompanying note that the language restriction is optional or required for a specific compliance or regional purpose.
