Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language ecommerce after-sales response template skill with no code execution, persistence, or hidden data flows.
Install only for Chinese-language ecommerce support workflows. Operators should add their own privacy rules for minimizing order identifiers and photos, using approved support channels, and avoiding storage or sharing outside the support system.
The description and instructions are entirely framed as a Chinese customer-service response generator, including mandated phrasing conventions, but there is no statement that use of Chinese is optional or limited to a China-specific deployment. This can violate language/locale policy when a skill forces a specific language without user opt-in or explicit justification.
The trigger condition is broad enough to activate on general conversations containing common after-sales or customer-service keywords, which can cause unintended routing and irrelevant instruction injection into unrelated chats. In an agentic environment, over-broad activation increases the chance of the skill influencing responses outside its intended scope, reducing reliability and potentially causing inappropriate business guidance.
The guidance explicitly instructs collection of order numbers, tracking numbers, delivery status, and damage photos, which can contain personal or sensitive customer data, but it provides no minimization, masking, retention, or secure-handling guidance. In a customer-service skill, this omission can lead agents or downstream systems to over-collect or mishandle customer data, increasing privacy and compliance risk.
The document presents all operational instructions and response templates only in Chinese, which can amount to forcing a specific language absent any documented user choice. The policy allows locale constraints when they are explicit and justified, but this file does not state that it is limited to Chinese-speaking users or provide an opt-in/alternative.
No suspicious patterns detected.
