Security audit
Security checks for vulnerabilities and agentic risk
This skill runs a local timed study-review workflow and its data access and logging are aligned with that purpose, though users should know it records sprint metrics locally.
Install only if you want an OpenAlgernon sprint workflow that uses the specified local study database and records sprint results in a local conversation log. Review or adjust the hardcoded database path and logging behavior if this is not your environment or if you do not want study-performance metrics retained.
The trigger phrases are broad enough to match normal study-related conversation, which can cause the skill to activate without clear user intent. Because this skill initiates a timed workflow and later persists session metadata, accidental invocation can lead to unexpected actions and data handling the user did not explicitly request.
The skill appends session details to a conversation log without informing the user or obtaining consent, creating an undisclosed persistence channel for behavioral data. Even though the stored fields appear limited, they reveal study habits, timing, and performance metrics, which may be sensitive in an educational context and can violate user expectations around privacy.
No suspicious patterns detected.
