Security audit
Security checks for vulnerabilities and agentic risk
This is a narrow routing skill that helps choose a China commerce shopping specialist and does not include code execution, data access, persistence, or hidden behavior.
Installers should understand that this skill is a router for China shopping and takeout workflows. It may be invoked for broad shopping questions, so consider tightening trigger wording or adding language-preference guidance if precise activation is important.
The manifest description is written to activate on Chinese phrases only and frames the skill as a China-commerce copilot, but it does not state that language choice is optional. This can violate a language/locale policy when the skill implicitly constrains interaction to Chinese without offering the user an explicit language preference or opt-in.
The only example clarification questions are hard-coded in Chinese, which instructs downstream behavior toward a specific language. Because no opt-in or alternative language path is provided, this is a natural-language locale-policy concern under the stated rules.
The default prompt describes activation for any "shopping or takeout request," which is a broad everyday category rather than a narrowly scoped invocation condition. The file does not provide explicit trigger phrases, exclusions, or negative examples to clarify when this skill should or should not be selected.
The router guidance is broad enough that the skill may activate for loosely related shopping questions without clear constraints on when to defer to a more specific skill. In an agent setting, overly permissive routing can cause misclassification of user intent, unnecessary invocation of downstream commerce skills, and reduced control over what actions or advice the system provides.
No suspicious patterns detected.
