Security audit
Security checks for vulnerabilities and agentic risk
This is a simple content-repurposing writing skill with broad but purpose-aligned input handling and no code execution, persistence, or sensitive access.
Before installing, users should understand that the skill may activate for broad content transformation requests; avoid providing confidential unpublished material unless you are comfortable having it rewritten into multiple public-facing formats.
The README presents activation examples like "Repurpose this blog post" and "Turn my podcast transcript into..." as free-form requests, but it does not define any explicit trigger phrases, boundaries, or exclusion conditions. This makes the skill's invocation scope broad and potentially overlapping with ordinary content-editing requests, increasing the chance of unintended activation.
The markdown says to 'Accept any source format' and includes very broad examples such as 'Raw notes or bullet points' and 'Even a single tweet or idea.' This makes the invocation scope unusually open-ended and does not provide exclusion conditions or negative examples, increasing the chance of unintended use for loosely related requests.
No suspicious patterns detected.
