Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Chinese-language weather helper that uses search for weather data and does not show hidden, persistent, or destructive behavior.
Install this if you want a Chinese-language weather helper. Be aware it may respond in Chinese and may activate on broad weather, temperature, or clothing-advice requests; it relies on search results for current weather.
The skill is written to operate and respond in Chinese without stating that this is conditioned on user language preference or locale. This can cause mismatched-language responses, reduce transparency, and degrade safe operation for users who may not understand the output or the follow-up questions.
The trigger conditions are broad enough to match common conversation about weather, temperature, or clothing advice, which can cause the skill to activate unexpectedly. This is primarily a scope/control issue rather than a direct security exploit, but it can lead to unintended tool use and user confusion if the agent invokes search without clear intent.
The manifest says the skill applies whenever the user asks about weather, but it does not define specific trigger phrases, scope constraints, or exclusion cases. This is broad enough to overlap with ordinary conversation and could cause unintended invocation when weather is mentioned casually.
The natural-language description and skill behavior are written only in Chinese, which can imply a fixed language experience without stating that the user can choose another language. The file provides no opt-in or justification that this is a region-specific skill.
No suspicious patterns detected.
