Security audit
Security checks for vulnerabilities and agentic risk
This skill is a shopping-advice helper that compares public prices and gives purchase recommendations, with no code execution, persistence, account access, or payment authority in the inspected artifacts.
Install this if you want decisive Chinese-language shopping advice based on public listings and promotion comparisons. Treat its recommendations as buying advice, not proof of exact live cart prices, and keep control of any account login, coupon use, checkout, or payment yourself.
The description says to use the skill whenever the user gives a product name or category and wants a direct answer on what is cheapest, most worth buying, or most discounted. This broad condition lacks explicit exclusions or negative examples, so it could overlap with many ordinary product-comparison requests and cause unintended invocation.
The instruction "This skill should sound like a decisive Chinese shopping advisor" imposes a specific language and locale style. The file repeatedly reinforces Chinese-only phrasing and Chinese internet shopping tone without offering user choice or documenting a justified regional restriction.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- clearly mark assumptions when exact cart price is unavailable
Stop before:
- logging into user accounts without consent
- adding irreversible orders
- claiming coupons or submitting payment
The default prompt hard-codes that the assistant should respond in Chinese regardless of the user's language preference. This can override user intent, reduce usability, and in some contexts cause misunderstandings about purchasing advice, though it is not a direct security compromise. In this shopping skill context, the issue is less dangerous than prompt injection or data exfiltration, but it is still an instruction-layer policy problem because it removes user choice without opt-in.
The file labels several phrases as "Typical triggers" but does not state whether these are exhaustive, nor does it provide contrasting examples of similar requests that should not activate the skill. That makes the boundary between this skill and general shopping assistance unclear.
The manifest description and keyword set are entirely in Chinese for the skill identity and usage context, with no indication that users may interact in another language or choose a locale. Under the policy for natural-language constraints, this can be a locale/language restriction that is not explicitly optional or justified.