Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward real-estate deal analysis skill, with a limited local report-save instruction that users should be aware of.
Before installing, be aware that completed analyses may be saved locally and can include property addresses, prices, financing assumptions, and cash-flow estimates. Use it for investment modeling, but review outputs independently before making financial decisions.
The skill instructs the agent to write a deal analysis file into a local workspace path, which is a side effect beyond the core analytical behavior described in the manifest. Even though the target path appears limited and business-related, automatic persistence can expose sensitive financial/property data, create unwanted files, and surprise users if performed without explicit consent.
The documentation describes saving output to disk without any warning, confirmation, or user-controlled choice. Silent file creation is risky because users may not expect local persistence of potentially sensitive investment assumptions, addresses, and cash-flow analysis, and an agent could perform this side effect automatically.
No suspicious patterns detected.
