Security audit
Security checks for vulnerabilities and agentic risk
This skill is a movie/TV search helper, but it is designed to surface torrent and download-site links broadly and without clear legality or safety warnings.
Review before installing. This skill may lead the agent to provide links to torrent or unofficial download sites for movies and shows, which can create copyright, malware, and unsafe-browsing risk. Prefer a version that defaults to licensed platforms and asks before showing unofficial download resources.
The trigger is explicitly designed to activate on broad natural-language phrases and even states the skill should be used without an explicit skill invocation. That creates overreach risk: the agent may route ordinary movie-related queries into a piracy-oriented workflow without clear user consent, increasing the chance of policy-violating or unsafe assistance.
The skill presents itself as a general movie-search tool, but its workflow prominently returns torrent, magnet, and download links from piracy-associated sites without warning the user. This concealment makes misuse more likely and can cause the agent to facilitate copyright infringement or direct users to risky third-party sites under the guise of normal content discovery.
This eval expects the response in Chinese ("返回 ...") even when the user prompt on L16 is in English. That imposes a language choice without user opt-in, which matches the language/locale policy violation criteria for natural-language content.
No suspicious patterns detected.
