Security audit
Security checks for vulnerabilities and agentic risk
This skill performs a coherent company background-report workflow, but it can generate and save a full report with broad triggering and unclear file-retention controls.
Install only if you are comfortable with the skill using the ali1688 connector to submit company-report tasks and saving generated reports locally. Prefer asking the agent to confirm before generating a full report and before saving any report file, especially for sensitive business, legal, or reputational research.
The trigger conditions are broad enough to activate on generic company-information queries, which can cause the skill to run when the user did not specifically request a formal background report workflow. That increases the chance of unnecessary tool calls, unintended data retrieval, and report-generation actions beyond user intent.
The skill directs the agent to save the full company report to a file automatically, without notifying the user or obtaining consent. Silent persistence of a potentially sensitive report increases privacy, retention, and unintended disclosure risks, especially if the file is accessible to other tools, sessions, or operators.
The skill instructs the agent to save the complete generated report to a file, but the declared skill scope is to generate and present a company background report in-session. Persisting the report creates unnecessary data retention and potential secondary exposure of sensitive business, legal, or reputational information without an explicit user request or documented retention controls.
No suspicious patterns detected.
