Security audit
Security checks for vulnerabilities and agentic risk
This skill is a narrowly scoped anime schedule lookup helper with no executable code, persistence, credential handling, or hidden high-impact behavior.
Installers should expect this skill to browse current schedule sources and to default to Chinese table output. Non-Chinese users may need to explicitly ask for another language or adjust the prompt, but no security-sensitive local access or persistence was found.
The manifest description says the skill will '输出中文表格,' which establishes a fixed output language. Because no opt-in, override, or justification is provided, this conflicts with the language/locale policy guidance.
The instruction 'Respond in Chinese' imposes a fixed language policy on all outputs. This is a natural-language policy concern because the skill does not offer the user a language choice or describe a justified region-specific requirement.
The skill’s default prompt hard-codes Chinese output regardless of the user’s language preference, which can override user intent and reduce transparency about how results are presented. This is not a direct security exploit, but it is a real policy/control issue because it constrains output behavior without explicit opt-in and could contribute to misleading or unusable responses for non-Chinese-speaking users.
No suspicious patterns detected.
