Security audit
Security checks for vulnerabilities and agentic risk
This skill coherently provides Path of Exile price lookup helpers using the public poe.ninja API, with no evidence of hidden persistence, credential access, or destructive behavior.
Before installing, expect the skill to run bundled Python scripts that contact poe.ninja over HTTPS for live market data. Use reasonable rate limits for cross-type searches, verify prices before important trades, and note that the primary skill instructions are in Chinese while the README has English guidance.
If the implementation only uses itemoverview and excludes currency endpoints while claiming support for currency exchange rates and all item types, the mismatch can mislead agents into issuing unsupported queries and trusting incomplete results. In agent ecosystems, this kind of capability misrepresentation can create unsafe automation paths, bad operational decisions, and silent data quality failures.
If the implementation only uses itemoverview and excludes currency endpoints while claiming support for currency exchange rates and all item types, the mismatch can mislead agents into issuing unsupported queries and trusting incomplete results. In agent ecosystems, this kind of capability misrepresentation can create unsafe automation paths, bad operational decisions, and silent data quality failures.
Without declared permissions the skill's intent is opaque and cannot be validated.
The file’s user-facing description and instructions are presented exclusively in Chinese, which can amount to a forced language choice for users who may expect language flexibility. The policy allows locale constraints when they are documented and justified, or when users are given an opt-in choice, neither of which appears here.
檔名與全文內容顯示此技能說明僅以繁體中文提供，未見提供其他語言版本連結、語言選項或要求使用者同意特定語系。依規則，若技能強制特定語言而未提供選擇，屬於自然語言政策風險。
该 markdown 文件的全部说明内容均以中文呈现，没有提供用户可选语言，也没有说明这是面向特定中文区域或受众的限定文档。根据语言/区域策略，这构成了未征得用户选择即强制特定语言的自然语言政策问题。
No suspicious patterns detected.
