Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent Argentina travel-planning skill that stores trip notes locally, with a privacy note about its persistent memory behavior.
Install only if you are comfortable with the skill keeping Argentina trip notes in ~/argentina/memory.md. Review that file if plans include sensitive details, and delete it when you no longer want the agent to reuse prior trip context.
The title explicitly scopes the skill to Argentina, which is a locale-specific constraint. The file does not state that this regional focus is optional, user-selected, or justified as a dedicated region-specific skill, so it may violate language/locale policy requirements.
The skill instructs the agent to create and update a persistent file in the user's home directory containing travel intent, constraints, and decision status, but it provides no user-facing notice or consent step. This creates a privacy and transparency issue because personal travel details may be stored without the user understanding that retention is happening or where the data is kept.
The instruction to read stored memory 'silently' means the agent may access previously saved personal travel constraints and plans without notifying the user. Even if the content is only travel-related, undisclosed retrieval of persisted user data undermines privacy expectations and can expose sensitive preferences or logistics information in ways the user did not anticipate.
The instruction says Argentina planning should use southern seasons first, which imposes a specific regional framing as a default. While contextually sensible for Argentina, the file does not explicitly present this as a user choice or opt-in preference.
