Security audit
Security checks for vulnerabilities and agentic risk
This skill is a small, disclosed Dianping restaurant lookup workflow and does not contain code, persistence, or hidden high-impact behavior.
Install only if you want the agent to use Dianping in a browser for restaurant searches. Be aware that if you are logged in, searches and page views may use your Dianping session, and any phone or SMS verification should be entered only by you.
The description lists generic use cases like users wanting restaurant ratings, recommendations, or nearby food suggestions, but it does not define specific trigger phrases, boundaries, or negative examples. In a manifest/markdown context, this broad wording could overlap with common conversational requests and cause unintended invocation.
The entire skill description and operating instructions are written only in Chinese and assume Chinese-language queries and workflow, with no indication that users may choose another language or that the restriction is an intentional, documented locale limitation. This can constitute a language/locale policy issue under the rule when no opt-in or justification is provided.
No suspicious patterns detected.
