Security audit
Security checks for vulnerabilities and agentic risk
This is a static travel-planning reference skill with no executable code, persistence, credential handling, or hidden behavior.
Before installing, understand that this skill provides general travel checklists and recommendations rather than verified live booking or visa advice; users should confirm current prices, policies, and document requirements with official sources or providers.
The skill description is broad enough to activate on many generic travel-planning requests, which can cause the agent to invoke this skill in situations where narrower or safer handling would be more appropriate. Overly broad routing increases the attack surface for prompt-injection or unsafe downstream behaviors in referenced content because the skill may be selected more often than intended.
The entire skill is written in Chinese and does not indicate that language selection is optional or limited to a justified Chinese-language context. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
No suspicious patterns detected.
