Chinese Restaurants

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only skill is aligned with finding nearby Chinese restaurants, but users should notice that it requires location data and suggests short-term location-based caching.

This appears safe to install as an instruction-only restaurant search skill. Before using it, be comfortable sharing your location for the search, and prefer coarse location information unless exact nearby results are needed.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI07: Insecure Inter-Agent Communication
Low
What this means

Your approximate or precise location may be used to look up nearby restaurants through an external or underlying place data source.

Why it was flagged

The skill anticipates querying a data source after location authorization. This is purpose-aligned for restaurant search, but the artifact does not identify the provider boundary.

Skill content
仅在用户授权定位后查询 ... PROVIDER_UNAVAILABLE: 数据源不可用
Recommendation

Only provide location when you want a local search, and prefer a city, neighborhood, or coarse location if exact coordinates are not necessary.

#
ASI06: Memory and Context Poisoning
Low
What this means

Location-based search data could be temporarily reused for caching, which may reveal where you searched if retained too long or too precisely.

Why it was flagged

The skill suggests short-term caching of location-derived queries while also recommending minimization of precise coordinates.

Skill content
避免保留精确坐标,必要时进行网格化模糊处理 ... 建议对同一 location+category+radius 做短时缓存以降低频率
Recommendation

Ensure any implementation keeps cache duration short, avoids precise coordinate retention, and clears cached location data when it is no longer needed.