Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward background-check checklist skill, but it handles sensitive candidate information that users should provide only with authorization and minimization.
Before using this skill, make sure the candidate has authorized the background check and provide only the information needed to generate the checklist. Redact unnecessary identifiers and avoid submitting government IDs, financial details, health information, family details, or unrelated personal data.
This skill processes highly sensitive candidate personal data, yet it does not prominently instruct users to submit only authorized, minimum-necessary information before use. Even though it claims local inference and no third-party sharing, users may still provide excessive or unauthorized PII, creating privacy, legal, and compliance risk under hiring and personal-data regulations.
The activation text says the skill is for when a user is preparing to hire a candidate and wants a background-check checklist and question template, but it does not define precise trigger phrases, boundaries, or cases where the skill should not activate. In a markdown skill description, this can lead to unintended invocation for adjacent recruitment or resume-review requests.
No suspicious patterns detected.
