Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Markdown alias skill for creating and validating reusable website profiles, with no executable code or hidden persistence.
Install this if you want an alias for website profile authoring and validation. Be aware that it may guide the agent to create reusable project profile data and run validation flows against external sites, so use it only in projects where that behavior is intended.
The natural-language invocation guidance is broad enough that ordinary user requests about making a site flow stable or reusable could implicitly trigger this skill without an explicit command. That increases the chance of unintended skill activation, expanding the skill’s authority and making prompt routing less predictable, especially in multi-skill environments.
The example prompt closely resembles a normal task request and can overlap with routine site-debugging or validation instructions. Because it lacks strong scoping language, it may cause the orchestration layer to select this skill in situations where the user did not intend profile persistence or broader validation behavior.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
For the full detailed playbook, also see:
- `skills/external-site-profile-learning/SKILL.md` in this repository
No suspicious patterns detected.