Security audit
Security checks for vulnerabilities and agentic risk
This is a China travel guide skill made of Markdown references, with no code, hidden install behavior, or privileged actions; users should still verify time-sensitive travel advice.
Install only if you are comfortable with Chinese-language travel guidance. Verify visa, entry, hotel registration, payment, VPN, and transport details against official sources before acting, and avoid treating novelty travel challenges as safety advice.
The manifest description and opening skill text are entirely in Chinese and present the assistant as a China travel helper for foreign visitors, but nowhere offers an opt-in or alternative language choice. This creates a locale/language policy concern because the skill appears to assume a fixed output language for all users.
This markdown file presents all operational guidance in Chinese, while several linked titles are in English, suggesting a mixed-audience or international-tourist context. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy violation when no language/locale choice or justification is provided.
This markdown file contains user-facing guidance exclusively in Chinese, starting with the title and continuing throughout the document. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless a justified locale constraint is documented, which is not present here.
The file title and the entire destination guide are written in Chinese, with no indication that other languages are supported or that Chinese is optional. Under the policy rule, forcing a specific language without user opt-in is a natural-language locale violation.
The document promotes a late-night solo walking challenge ('凌晨3点独自 city walk') and reinforces it with a broad safety claim that China is among the safest countries, without contextual safety caveats. In a travel-assistant skill aimed at foreign visitors, this can encourage risky behavior in unfamiliar environments and create a false sense of security around crime, harassment, scams, disorientation, or emergency response limitations.
The file presents the skill content entirely in Chinese from the title onward, with no indication that users can choose another language or that the skill is intentionally limited to Chinese-speaking users. Under the policy rule, forcing a specific language without user opt-in is a natural-language locale violation.
SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all instructions and guidance only in Chinese, with no opt-in, alternate language path, or justification that the skill is limited to Chinese-speaking users.
No suspicious patterns detected.
