Security audit
Security checks for vulnerabilities and agentic risk
This ecommerce prompt skill is mostly a simple template library, but it includes a review-request workflow that asks for positive reviews in exchange for gifts or coupons.
Install only if you are prepared to revise the review-request template before use. Remove any request for specifically positive reviews and any gifts, coupons, discounts, or benefits tied to leaving a review; use neutral, honest feedback requests that comply with each marketplace's rules.
The usage section says the skill activates whenever users have broad needs like writing descriptions, analyzing competitors, handling customer service, product research, ad copy, or sales analysis. These are expansive, common tasks without clear trigger phrases, constraints, or negative examples, so the invocation boundary is unclear and could cause unintended activation.
The section title and prompt explicitly require '英文' content for review-request messages, but the document does not indicate that language selection is optional or based on user preference. This can violate language/locale policy because it forces a specific language rather than offering a choice.
The template explicitly instructs requesting positive reviews while offering a gift or coupon as an incentive. On major e-commerce platforms, incentivized positive reviews are commonly prohibited because they manipulate marketplace trust signals and can lead to account sanctions, listing suppression, or consumer deception. The surrounding note to follow platform rules does not neutralize the earlier concrete instruction, so the skill context makes this more dangerous by packaging a policy-violating tactic as a reusable workflow.
No suspicious patterns detected.
