Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent Indonesia travel-planning skill that uses markdown guidance and a disclosed local notes folder, with no executable code or network behavior found.
Install only if you are comfortable with the skill keeping local Indonesia trip-planning notes under ~/indonesia/. Review or delete that folder if you do not want saved travel preferences, budget assumptions, mobility constraints, or itinerary details to persist.
The heading explicitly scopes the skill content to Indonesia, which can be a locale constraint. The file does not indicate that this regional focus is optional, user-selected, or justified as part of a clearly region-specific tool, so it may violate the language/locale policy requirement.
The template includes an activation rule placeholder of 'other rule', which is underspecified and can lead to overly broad or inconsistent triggering of the skill. In an agent system, ambiguous activation conditions may cause the Indonesia travel skill to activate on unrelated prompts, increasing the chance of unintended data access, incorrect routing, or interference with other skills.
The skill directs proactive activation for a very broad set of terms and travel-adjacent topics, which can cause the agent to engage in many contexts the user did not clearly request. This creates a boundary/consent issue: the skill may inject itself into unrelated conversations, increasing the chance of unwanted data collection, overreach, or confusing behavior.
The skill instructs the agent to create and maintain local trip records under ~/indonesia/ without requiring explicit notice and consent before storing user information. Even though the data is framed as lightweight travel notes, it can include itinerary details, mobility limitations, budget, and visa assumptions, which are personal and sensitive enough to create privacy and retention risks.
The heading explicitly scopes the skill content to Indonesia, which can indicate a locale-specific constraint. The file does not state that this regional focus is optional, user-selected, or justified as part of a clearly region-specific tool.
This file is entirely framed as guidance for Indonesia and does not offer any user choice about language or locale context. Under the policy category, locale-specific guidance can be a concern when a skill imposes a specific regional context without opt-in or explicit justification.
No suspicious patterns detected.
