Security audit
Security checks for vulnerabilities and agentic risk
This skill gives public takeout-ordering advice and explicitly avoids login, payment, order submission, cookie handling, and persistence.
Installers should treat this as an advisory takeout comparison skill. Do not rely on it to place orders or access accounts, and recheck final prices, fees, delivery time, coupons, and terms before paying.
The phrase 'Use this skill when the user wants public buying, ordering, sourcing, or booking guidance' is very broad and extends well beyond takeout decisions. Because it lacks concrete trigger boundaries or exclusion examples, it could cause this skill to be invoked for generic shopping or booking requests not actually in scope.
The skill description uses untranslated Chinese terms like '起送价, 配送费, 满减' without indicating language choice or offering an alternative locale. This can impose a language/locale assumption on users rather than explicitly allowing them to choose their preferred language.
No suspicious patterns detected.
