Security audit
Security checks for vulnerabilities and agentic risk
This is a short Chinese-language coupon/deals guidance skill with no executable code, persistence, hidden data access, or unsafe authority.
Installers should understand this skill appears to provide Chinese-language coupon and promotion guidance. Be cautious with any third-party offer that asks for sensitive authorization or personal information, but the skill artifact itself does not request or automate such access.
The example trigger phrases are generic enough to match ordinary user requests about handling tasks or finding latest offers, which can cause unintended routing to this skill. Because the skill is about coupons, rewards, and third-party offers, overbroad invocation increases the chance of users being steered into promotional or authorization-related flows they did not explicitly request.
The skill name, description, headings, and example requests are entirely in Chinese, with no indication that other languages are supported or that Chinese is a justified locale restriction. This can violate language/locale policy when the skill implicitly requires a specific language without user opt-in.
No suspicious patterns detected.
