Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed public price-lookup helper for smzdm.com and does not request local access, credentials, persistence, or destructive actions.
Before installing, be aware that the skill is written for Chinese-language smzdm.com price searches and may activate on broad NAS or brand-related queries. Use it for public price lookup only, avoid excessive scraping, and verify prices on the actual merchant page before buying.
The manifest description and the entire skill instructions are written exclusively in Chinese, and the usage/output examples assume Chinese-language interaction. There is no statement that the skill supports other languages or that Chinese is a justified region-specific requirement, which can violate language/locale policy expectations.
The trigger keywords include broad brand and product terms such as "smzdm", "群晖", and "NAS价格", which can cause the skill to activate for general conversation rather than clear user intent to use this specific scraping skill. This increases the chance of unintended execution, including unnecessary web-scraping behavior or routing user requests to the wrong capability.
The natural-language metadata and all trigger keywords are Chinese-only, which effectively constrains use to one language without any opt-in or justification. Under the policy, language restrictions should either provide user choice or clearly document a justified locale-specific scope.
No suspicious patterns detected.
