Security audit
Security checks for vulnerabilities and agentic risk
This is a prompt-only dry-cleaning pickup tracker with clear boundaries and no code, network, credential, payment, or account handling.
Installers should expect an English prompt-only assistant for organizing dry-cleaning pickup details. Avoid entering payment card data, account credentials, dispute evidence, or sensitive claims information; the skill itself instructs the agent not to handle those areas.
The checklist explicitly marks 'Language is English only,' and repeats that constraint in scan evidence. The policy provided says to flag language or locale restrictions unless the skill offers user choice or the constraint is clearly documented and justified.
The 'Clean Scan Evidence' section repeats that SKILL.md, skill.json, and ACCEPTANCE.md are 'English only.' This reinforces a language restriction that is not presented as optional and is not justified by any region-specific or compliance requirement.
This markdown file includes a natural-language statement that the skill is restricted to English only. Because this is a user-facing policy-style constraint rather than a region-specific compliance justification or user opt-in choice, it fits the language/locale policy concern.
The manifest sets language: "en", which is a natural-language locale constraint. The file does not offer the user a language choice or explain why English-only behavior is necessary for this skill's function.
No suspicious patterns detected.
