Security audit
Security checks for vulnerabilities and agentic risk
This is a prompt-only used-furniture checklist skill with no executable code, network use, credentials, persistence, or hidden high-impact behavior.
Installers should understand that the skill is an English-only prompt workflow for practical shopping safety checks. It can help organize questions and risk flags, but it does not verify recalls itself, inspect items, provide legal advice, or guarantee that furniture is safe, clean, pest-free, authentic, or worth the price.
Line L06 requires the manifest to declare language=en, which encodes a fixed language setting. Because no opt-in, alternative language support, or region-specific justification is provided, this conflicts with the language/locale policy.
Line L08 states that public-facing documentation is 'English only,' which is a natural-language policy constraint. Under the policy rule, forcing a specific language without offering user choice or documenting a justified locale limitation is a violation.
The manifest sets "language": "en", which is a natural-language locale constraint. There is no indication in this file that the skill offers a language choice or that the English-only restriction is justified by a region-specific purpose.
