Security audit
Security checks for vulnerabilities and agentic risk
OrderKeeper is a disclosed Chinese/mainland-China post-purchase support skill with no executable code; the main consideration is that it may handle private order and receipt details.
Install this if you want Chinese-language help organizing post-purchase order problems. Avoid sharing unnecessary personal data in screenshots or receipts, and review any generated customer-service message before sending it, especially if you prefer a language other than Chinese.
The skill description is entirely in Chinese and all example prompts are Chinese-language invocations, which signals a fixed language/locale expectation. There is no statement that other languages are supported, no opt-in for Chinese, and no justification that this is a region-specific skill.
The natural-language content is predominantly written in Chinese and presents the skill copy, titles, and user-facing descriptions in a single language without offering an alternative language or stating that the skill is region- or locale-specific. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The skill explicitly requires the customer-service script to be in concise, sendable Chinese without offering a language fallback or documenting that the constraint is limited to mainland China support interactions. This can exclude users who need another language or accessibility accommodation, and may cause incorrect or unusable outputs if the user is not able to review or send Chinese text safely.
The default prompt invokes the skill through a broad, catch-all instruction without defining tighter trigger conditions or scope boundaries. This increases the chance the agent will route unrelated conversations containing order-like language into the skill, causing unintended handling of purchase, refund, or warranty decisions and unnecessary exposure of potentially sensitive order information.
Forcing Chinese output in the default prompt overrides user language preference and can degrade comprehension when the user is not expecting or able to read Chinese. In an after-sales context, misunderstanding deadlines, refund steps, or warranty instructions could lead to missed actions or incorrect decisions.
The tone rule explicitly prefers the Chinese phrase 现在先做这个, which imposes a language choice in the skill guidance without indicating that the user can choose their preferred language. This is a natural-language policy concern because it can cause responses in a specific locale regardless of user preference.
This markdown file contains all customer-service script frames exclusively in Chinese across multiple sections, but it does not state that the skill is intended only for Chinese-speaking contexts or offer the user a language choice. That can violate the language/locale policy because it effectively forces a specific language without user opt-in.
The manifest description is entirely in Chinese and presents the skill as a Chinese-language shopping assistant without offering any language or locale choice. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation.
The 'Useful phrasing' section provides only Chinese example text, which can imply the skill expects or enforces a specific language. Because the document does not offer an alternative language option or explain that it is intended for a Chinese-language context, this is a natural-language locale policy issue.
No suspicious patterns detected.
