Security audit
Security checks for vulnerabilities and agentic risk
This skill is a route-reading helper for Amap/Baidu that has a real privacy consideration around Browser Relay but no hidden code, install behavior, persistence, or unrelated data access.
Install this only if you are comfortable sharing route queries and map results with the agent. If Browser Relay is used, open a dedicated Amap or Baidu route tab and select only that exact tab, since visible route details may include sensitive locations.
The skill description is entirely written in Chinese, including all headings and usage descriptions, with no indication that users may choose another language. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly documented and justified.
The skill explicitly instructs the agent to switch to the user's live browser tab via Browser Relay to read route results, but it does not require a clear user consent flow or a privacy warning about exposure of visible tab contents. Accessing a live user tab can reveal unrelated sensitive data in the page, browser context, or adjacent UI state, so the omission creates a real privacy and data-exposure risk.
The description defines activation through broad examples like asking how to get from A to B, which can match many ordinary travel-related queries without clear boundaries. This can cause the skill to trigger when not explicitly intended, increasing the chance of over-collection of location context or unintended routing guidance being presented as authoritative.
The skill description is written only in Chinese and implies Chinese-language operation without stating whether language or locale is optional. This can lead to mismatched execution for users in other languages or regions, causing misunderstood instructions or unsafe navigation advice if route details are rendered in an unusable language.
No suspicious patterns detected.
