Security audit
Security checks for vulnerabilities and agentic risk
This skill fetches public URBTIX event listings, caches them locally, and does not show hidden credential access, privilege escalation, or destructive behavior.
Before installing, expect the skill to contact the URBTIX public XML distribution endpoint and store event-feed cache files locally. Use it for public event lookups; no credentials are required.
The main query interface sets language='en' by default and documents only two supported languages, which means the skill will answer in English unless the caller explicitly specifies otherwise. This is a natural-language locale choice imposed by the skill rather than derived from user preference.
The usage text explicitly limits the language option to en|zh, which is a natural-language locale restriction. The file does not indicate that this constraint is optional, user-configurable beyond those two choices, or justified as a region-specific requirement.
The --lang argument uses choices=["en", "zh"], which hard-codes a two-language policy in the skill behavior. Because no opt-in rationale or documented regional justification is provided in the file, this is a locale policy limitation.
No suspicious patterns detected.
