Security audit
Security checks for vulnerabilities and agentic risk
This is a prompt-only meal-planning skill with clear health boundaries and no executable code, network use, credentials, or persistence.
Safe to install if you want English-language, general meal-routine planning. Do not treat its output as medical nutrition advice, especially for allergies, eating disorders, pregnancy, diabetes, kidney disease, heart disease, or other medically restricted diets.
The acceptance criteria explicitly require 'English only' and repeat 'English-only content' in the scan evidence. This is a natural-language locale restriction, and the file does not indicate user choice, opt-in, or a justified region-specific need.
The manifest lists triggerKeywords such as "routine," "food," and "weekly planning," which are generic phrases that could match many unrelated conversations. The file does not provide exclusion conditions or negative examples to clarify when the skill should not activate.
The manifest lists generic trigger keywords such as "routine" and "food," which overlap with common everyday language and do not narrowly identify this specific meal-planning skill. The file also does not provide exclusion conditions or tighter scope constraints to reduce accidental activation.
The manifest sets language to "en," which can be interpreted as forcing a specific language or locale. The file does not mention any user language choice, opt-in, or justification for an English-only constraint.
The manifest specifies "language": "en", which can represent a language restriction without any accompanying user opt-in, multilingual option, or justification for why the skill must be English-only. Under the policy, language constraints should either be optional for users or clearly documented as necessary.
