Security audit
Security checks for vulnerabilities and agentic risk
This skill does what it claims: it looks up Chinese courier tracking data through kuaidi100.com, with no evidence of hidden persistence, credential access, or destructive behavior.
Install only if you are comfortable sending package tracking numbers, and possibly courier-specific helper details such as phone-number suffixes when needed, to kuaidi100.com for lookup. Confirm intent before using it on generic package-tracking requests outside Chinese courier contexts.
The skill invokes a network-backed tracking script but does not declare any tool scope or allowed-tools boundaries. That creates a governance gap: the agent may access external network functionality without explicit authorization or review, increasing the risk of unintended data egress and making the skill harder to constrain safely.
The trigger language is broad enough to match common requests like '查一下物流' or 'track my package' in many contexts, which can cause the skill to activate unexpectedly. Misrouting user requests to this skill can lead to unnecessary disclosure of tracking numbers and logistics data to an external service without clear user intent.
The skill states that it uses kuaidi100.com but does not clearly warn users that entered tracking numbers and related shipment metadata will be transmitted to an external website/API. Tracking numbers can be sensitive because they reveal commerce activity, shipment status, and sometimes correlate to personal delivery information, so silent transmission creates a privacy and consent issue.
The module description, help text, and formatted output are all hard-coded in Chinese, and the skill does not provide any language or locale opt-in. This constitutes a natural-language locale policy issue because the skill enforces a specific language rather than offering a user choice or clearly justifying a locale restriction.
The script sends the user's tracking number and inferred carrier to kuaidi100.com, a third-party service, without any explicit disclosure or consent flow. Tracking numbers can be personal data because they can reveal purchase activity, shipping status, and sometimes correlate to a specific individual or address, so undisclosed external transmission creates a real privacy and compliance risk.
The description is primarily in Chinese and frames the skill for Chinese express requests, yet it also includes the English trigger "track my package" without clarifying the response language or offering a language choice. This can create a locale/language policy issue if the skill defaults to Chinese output without user opt-in.
This markdown file presents all user-facing content in Chinese and does not indicate that the skill is region-specific or that users can opt into a Chinese-only experience. Under the language/locale policy check, forcing a specific language without user choice can be a natural-language policy violation.
No suspicious patterns detected.
