Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent travel-itinerary sharing wrapper that publishes user-approved trip content to a WeChat-friendly LivePage link, with some privacy considerations users should understand.
Install this if you want an agent to publish confirmed trip materials to a hosted WeChat-friendly page. Before using forms or engagement summaries, make sure companions understand that votes, sign-ups, comments, and viewing activity may be visible to the trip organizer, and prefer passcode visibility over public sharing.
The trigger phrases are broad enough to match ordinary travel-related conversation rather than an explicit request to publish content. That can cause unintended invocation of a skill that shares information externally, increasing the risk of accidental disclosure of itinerary details, links, or companion coordination data.
The skill instructs the agent to share trip pages and later read engagement, voting, and feedback data, but it does not require a clear user-facing privacy notice about what companion data may be collected or visible. In a travel-sharing context, this can expose sensitive behavioral information such as who viewed the page, participation choices, and possibly travel timing or social relationships without informed consent.
No suspicious patterns detected.
