Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language informational skill for Tianfushouyuan store and service details, with no code execution, installation steps, credentials, or hidden persistence.
Before installing, be aware this skill may answer in Chinese and may activate on broad store or funeral-service questions; verify phone numbers, addresses, prices, and hours with official Tianfushouyuan channels before relying on them.
The trigger terms are very broad and include generic words like '门店', '地址', '营业时间', '预约', and '服务', which can match many unrelated user requests. This can cause the skill to activate outside its intended scope, leading to irrelevant responses, routing mistakes, and possible leakage of brand-specific contact details into unrelated conversations.
The skill's response-style instructions appear to lock output to a Chinese-only tone without checking the user's preferred language. While not a classic security flaw, this is a safety and usability issue because it can override user intent, reduce transparency, and increase the chance of misunderstanding during sensitive bereavement-related interactions.
This markdown template is entirely written in Chinese and provides no indication that language selection is optional or that the template is intended only for a Chinese-speaking or region-specific context. Under the policy rule for natural-language violations, forcing a specific language without user opt-in is reportable.
The entire skill file is written only in Chinese and provides no indication that users may choose another language or that the locale restriction is intentional. Under the policy rule for natural-language violations, a skill that implicitly forces one language without opt-in or justification can be a locale-policy concern.
The entire skill content is presented only in Chinese, with no indication that language selection is optional or that the file is intentionally limited to Chinese-speaking users. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.
The file presents all user-facing content exclusively in Chinese, including headings and store details, with no indication that users can choose another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
This markdown file presents all store information exclusively in Chinese and does not mention that the language is fixed or optional. Under the policy rule for language/locale, forcing a specific language without user opt-in can be a natural-language policy violation.
No suspicious patterns detected.
