Security audit
Security checks for vulnerabilities and agentic risk
This is a Hong Kong travel-planning skill with local notes and no executable code, network behavior, or hidden high-impact authority.
Before installing, be aware that the skill can keep Hong Kong trip preferences locally in ~/hongkong/ and may ask whether it should proactively help whenever Hong Kong is mentioned. Decline or limit that opt-in if you only want it used for direct travel-planning requests.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
areas:
## Style
<!-- foodie, city, nightlife, family, outdoors, mix -->
## Group
<!-- solo, couple, family, friends, business -->
The title explicitly fixes the skill to 'HongKong', which is a locale-specific constraint. The file does not offer any user choice of region or explain why the locale restriction is required, which can violate the policy against forcing a specific locale without opt-in.
The instruction to read this file when ~/hongkong/ doesn't exist or is empty creates a broad, state-based activation condition that is not clearly tied to explicit user intent. This can cause the skill to activate opportunistically during normal operation, leading to unintended memory use or conversational steering even when the user did not ask for Hong Kong assistance.
The opt-in phrase "Want me to jump in whenever Hong Kong comes up?" is overly broad because 'Hong Kong' may arise in many ordinary conversations unrelated to requesting this skill. Once enabled, the skill could insert itself into future discussions unexpectedly, causing persistent unsolicited intervention and possibly unnecessary memory-triggered behavior.
The template hard-codes a Hong Kong-specific destination and file naming in natural language, which can amount to a locale constraint without any opt-in or explanation. Under the policy, locale restrictions should either be optional for the user or clearly justified as region-specific.
The title explicitly scopes the skill to "HongKong," which is a locale constraint expressed in natural language. The file does not offer any user choice or opt-in for alternative locales, and no justification for the locale restriction is stated in the content.
No suspicious patterns detected.