Security audit
Security checks for vulnerabilities and agentic risk
This is a pure instruction-based home gym flooring buying guide with no code execution, data access, persistence, or hidden behaviors found.
Before relying on recommendations, verify current product specs, pricing, availability, indoor air-quality certifications, and building requirements yourself. The mismatched homepage URL is worth noting as a documentation quality issue, but the inspected skill content is coherent and low-risk.
The listed example invocations include generic phrases such as "help me choose gym flooring" and "best flooring for home gym," which are broad enough to match ordinary conversational requests beyond a narrowly defined skill trigger. Although the surrounding section gives use/not-use guidance, it does not provide tighter trigger constraints or negative examples for these phrases themselves.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
5. Assuming "rubber is rubber" — recycled crumb rubber and virgin rubber differ significantly in density, consistency, odor, and surface quality; the right choice depends on the use case
6. Skipping the 10% overage — trimming always creates waste; ordering to exact square footage guarantees running short
7. Skipping acoustic underlayment in multi-story buildings — rubber flooring alone may not meet IIC ≥ 50 requirements without a decoupling underlayment layer
8. Buying horse stall mats without checking indoor VOC certification — agricultural mats may off-gas rubber compounds; verify the product is approved for indoor use
9. Choosing a platform too small for Olympic lifting — a standard deadlift platform (72 inches / 6 ft) is insufficient for split jerks in Olympic lifting; minimum 8 ft × 8 ft is the professional standard
### Step 4 — Deliver the structured recommendation
This is a markdown file, so missing-warning review applies to user-affecting behaviours described in the README. The skill says it will suggest up to 5 real products tailored to the user's region, but does not warn users to verify availability, pricing, or suitability before purchase; given it explicitly positions itself as avoiding biased sales advice, a brief disclaimer would improve transparency for purchase-impacting recommendations.
The file documents a 'Home Gym Flooring Buying Consultant', but the homepage URL points to a 'rowing-machine-buying-consultant' path. This is an active documentation contradiction rather than a mere omission, because it identifies the skill as one thing while linking to another skill's location.