Security audit
Security checks for vulnerabilities and agentic risk
This is a China travel-planning skill with disclosed local trip memory and no evidence of hidden network, executable, or system-level behavior.
Before installing, understand that the skill may save travel preferences and trip details locally in ~/china/memory.md and reuse them later; review or delete that file if you do not want persistent travel memory.
The trigger condition 'When user mentions China travel for the first time' is broad and underspecified, which can cause the skill to activate on casual or exploratory mentions rather than clear user intent to use the skill. In this file, that matters because activation immediately leads into filesystem actions and persistent memory setup, increasing the chance of unintended data handling.
The skill instructs the agent to create and update files under ~/china and to read them silently on return visits, without any user-facing disclosure or consent flow. This creates a privacy and transparency risk because user travel preferences, constraints, and potentially sensitive data can be persisted and reused without the user clearly understanding that local memory is being created and read.
The document is explicitly scoped to 'China' in the title, which imposes a locale-specific framing without any nearby note that this is optional, user-selected, or part of a clearly documented regional compliance context. Under the policy criteria, locale constraints should be opt-in or explicitly justified.
The skill is explicitly constrained to China in the title and all guidance is framed only around Chinese regions, with no indication that this locale restriction is optional or user-selected. The policy allows locale constraints when they are clearly justified, but this file does not explain why China-only guidance is required.
No suspicious patterns detected.
