Security audit
Security checks for vulnerabilities and agentic risk
This is a transparent TDD workflow skill with ordinary code-editing and test-running guidance, plus a non-security language preference issue.
Install this if you want a SPEC-driven TDD workflow and are comfortable with it asking questions and reporting progress in Portuguese. Expect it to modify project code/tests and run normal validation commands when you invoke it for implementation work.
The description states that user-facing questions and recommendations must be in Portuguese (pt-BR), which imposes a fixed language policy. The rule allows locale constraints only when the user is given a choice or when the constraint is clearly documented and justified as region-specific, neither of which appears here.
This line explicitly forces a specific language for all user-facing communication. That is a natural-language policy violation under the stated rules because it does not offer the user a language choice and does not justify the restriction as a region-specific requirement.
