Security audit
Security checks for vulnerabilities and agentic risk
This is a plain-text environmental compliance guidance skill with purpose-aligned information requests and no hidden execution, persistence, or external data flow.
Before using it, provide only the facility and operations details needed for the compliance question, redact unnecessary identifiers where possible, and treat its regulatory and penalty guidance as planning support rather than legal advice.
The README tells users to 'Tell the agent your facility type, location, and operations' but does not define explicit trigger phrases, activation boundaries, or negative examples. This is broad enough to overlap with ordinary conversations about a business, increasing the risk of unintended invocation.
The skill explicitly asks users to provide sensitive facility and business details, including chemicals used, waste generated, inspection history, violations, employee count, and annual revenue, without any data minimization, privacy notice, retention guidance, or safe-handling instructions. In an environmental compliance context, these details can reveal regulated materials, operational weaknesses, and business-sensitive information that could be misused if logged, shared with third parties, or exposed through downstream systems.
No suspicious patterns detected.
