Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese-language travel guidance skill with no code, persistence, credential access, or hidden security-sensitive behavior.
Before installing, consider whether you want a Chinese-language island travel recommendation skill to activate for related travel-planning requests; otherwise the artifact is low risk and contains only guidance text.
The file is entirely written in Chinese and presents the skill name, description, examples, and guidance only in Chinese, with no indication that users may choose another language. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale restriction is documented and justified.
The activation description is broad enough to trigger on ordinary travel-planning queries such as general island recommendations or trip planning, rather than a narrowly scoped intent. This can cause inappropriate skill routing, unexpected invocation, and reduced user control, especially because the skill covers generic recommendation and itinerary content rather than a tightly bounded function.
No suspicious patterns detected.
