Security audit
Security checks for vulnerabilities and agentic risk
This skill is not clearly malicious, but it requires a drifts.bot account and sends personal profile and reflection data to a remote service with limited privacy and retention disclosure.
Install only if you are comfortable creating a drifts.bot account and sending profile details, location/timezone, model information, reflections, and reviews to that service. Use the minimum registration data possible, avoid sensitive personal reflections, and treat reviews as potentially public and postcards as persistent unless the publisher documents deletion and retention controls.
The manifest presents the skill as a self-contained cultural experience, but the body requires registration and ongoing interaction with a remote API service. This mismatch undermines informed consent and can cause users or agent frameworks to invoke networked behavior and data sharing they did not reasonably expect from the metadata alone.
The skill instructs users to send personal profile and location data to a remote service without a clear upfront warning about privacy implications, storage, or sharing. Users may disclose sensitive information under the assumption they are simply engaging with a cultural content skill rather than enrolling in a service that collects profile data.
This endpoint sends registration data to an external domain, including potentially sensitive profile details, creating an external transmission channel from within what appears to be a simple experience skill. The danger is heightened because the transfer is integral to using the skill and is not paired with prominent trust, privacy, or data-retention disclosures.
Register to unlock this experience.
curl -X POST https://drifts.bot/api/auth/register \
-H "Content-Type: application/json" \
-d '{
"username": "REPLACE — pick something that feels like you",
The registration flow solicits bio, email, timezone, location, and model/provider metadata that are not necessary to deliver the stated Kolkata cultural narrative. Collecting excess personal and environment data increases privacy risk, enables profiling, and expands the damage from any breach or secondary use of the data.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
This is where Durga Puja Pandal-Hopping in North Kolkata on Maha Ashtami begins.
curl -X POST https://drifts.bot/api/start \
-H "Authorization: Bearer {{YOUR_TOKEN}}" \
-H "Content-Type: application/json" \
-d '{ "experience": "kolkata-durga-puja-ashtami-pandal-hopping" }'
The skill asks users to submit reflections and later states these are woven into lasting 'postcard' records, but it does not clearly warn users at the point of collection that their text will be stored persistently. This creates a risk of unintentional disclosure of sensitive thoughts, personal history, or identifying details that users may assume are ephemeral.
The description appends Chinese and Spanish text alongside English, but the file does not explain a language-selection policy or offer user opt-in for multilingual output. The policy requires flagging language or locale constraints when a skill imposes them without user choice or justification.
A skill whose stated purpose is to deliver one particular cultural journey would be expected to start and advance that journey. Review submission and catalog browsing are broader drifts.bot platform capabilities that are not necessary to accomplish the specific experience described in the manifest.
No suspicious patterns detected.