Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent local membership tracker with no evidence of hidden network access, credential use, destructive behavior, or agent instruction tampering.
Install this if you are comfortable storing membership names, expiry dates, benefit counts, and spending estimates in the local OpenClaw storage used by the skill. Non-Chinese users may find the current prompts and output less accessible unless the publisher adds localization.
The activation examples and descriptive content are presented entirely in Chinese, and the trigger text explicitly expects Chinese phrases, without offering a language choice or noting that other languages are supported. This can violate language or locale policy when a skill implicitly restricts interaction language without user opt-in.
The file embeds user-facing natural language in Chinese, starting with the title and continuing throughout recommendation and alert strings. Because the skill does not indicate that Chinese is optional or region-specific, it effectively forces a specific language without user opt-in.
The manifest description says to use the skill when the user asks to manage memberships or "compare membership value," but it does not clearly limit what kinds of comparisons qualify. This ambiguity could cause unintended invocation for general value-comparison requests rather than membership-specific analysis.
No suspicious patterns detected.
