Security audit
Security checks for vulnerabilities and agentic risk
This is a simple deal-finding guidance skill with no executable code, persistence, credential handling, or hidden high-impact behavior.
Installers should understand this as a Chinese-language deal-hunting helper. It may need web searches for current prices, coupons, reviews, and sale timing, so users should verify deals and seller trust before buying, but the artifact does not ask for private accounts or unsafe permissions.
The visible natural-language description, headings, and example requests are all written in Chinese, with no indication that other languages are supported or that Chinese output is optional. This can violate language/locale policy when a skill implicitly enforces a specific language without user opt-in.
The sample trigger language uses generic phrasing such as '如何快速使用…处理 [具体场景任务]' and asks about '核心功能', which does not clearly constrain when this skill should activate versus a general shopping or help assistant. The file also provides no negative examples or explicit trigger boundaries to prevent unintended invocation.
No suspicious patterns detected.
