Security audit
Security checks for vulnerabilities and agentic risk
This learning coach is mostly educational, but it tells the agent to create recurring study tasks despite also saying it will not change the user's environment.
Review the scheduling behavior before installing. The teaching content and documentation use look ordinary, but only use this skill if you are comfortable with it creating recurring study tasks after approval; ask the agent to preview the exact schedule, duration, and removal steps before allowing task creation.
The documented safety boundary says not to run commands or change environments, yet the skill later directs the agent to schedule recurring tasks. Even with confirmation, this is a side-effecting operation that can modify system or platform state, so the internal contradiction can mislead users and downstream policy enforcement about the skill's true capabilities.
The skill states it will only provide guidance and not perform actions, but later instructs the agent to create recurring scheduled tasks after user confirmation. That contradiction matters because scheduling creates persistent system state and extends the agent's influence beyond the current session, which is more than passive teaching.
Creating a recurring scheduled task introduces session persistence: the skill's effects continue after the immediate conversation ends. In a teaching context this is not inherently malicious, but it is still risky because persistent automation can surprise users, accumulate notifications or actions over time, and be harder to notice or revoke than a one-time response.
## Automation Schedule
Ask each time whether the user wants a fixed study schedule.
Do not create any scheduled tasks without explicit confirmation; only describe the optional arrangement.
After confirmation, schedule recurring tasks to deliver the learning plan.
Once scheduled, remind the user to check the task list and confirm it was added.
The skill instructs the agent to create recurring scheduled tasks, but the skill description presents it as a learning coach and does not prominently disclose that it may establish persistent automation. Users choosing an educational skill may not reasonably expect system-impacting behavior, increasing the risk of surprise actions or overbroad consent.