Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent documentation-editing skill, with the main practical risk that accepted edits are saved back into the original Markdown file.
Install this for interactive documentation cleanup when you are comfortable letting the agent read and edit the target Markdown file. For important docs, keep version control or a backup and ask to review the final diff before allowing the original file to be overwritten.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
>
> 3. Configure environment variables
> ```bash
> cp .env.example .env
> ```
>
> 4. Start the server
This pattern attempts to override system instructions or ignore safety constraints. Without LLM analysis, manual review is recommended.
> | Option | Type | Default | Description |
> |--------|------|---------|-------------|
> | port | number | 3000 | Server port |
> | debug | boolean | false | Enable debug mode |
>
> Now let's configure each one step by step...
The skill explicitly performs self-directed file modification by overwriting the original document after an interactive workflow. Even though the target is user-specified and the behavior is the skill's purpose, it is still a real write capability that can damage content if the path is wrong, if section preservation fails, or if the user misunderstands the consequences.
1. **Build updated content** from accepted changes
2. **Preserve unchanged sections** exactly as they were
3. **Overwrite original file** with updated content
### Step 5: Report Results
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- Includes explanatory tangents
- Missing prerequisites
- Steps not atomic (multiple actions per step)
- No verification that goal was achieved
**Reference issues:**
- Missing parameter types or return values
The skill instructs the agent to overwrite the user-supplied target file in place, but it does not require creating a backup or obtaining a final confirmation immediately before the destructive write. This creates a real integrity and data-loss risk if the analysis/refinement is wrong, incomplete, or applied to the wrong path.
No suspicious patterns detected.