Security audit
Security checks for vulnerabilities and agentic risk
This is a text-only NDIS note and claiming guidance skill with no executable behavior, but users should minimize sensitive participant details and verify current NDIS rules before relying on it.
Install only if you need Australian NDIS documentation or claiming help. Avoid entering real participant names, NDIS numbers, addresses, or incident details unless necessary for the document you are drafting, and verify all codes, prices, and rules against the current official NDIS catalogue before submitting claims.
The trigger list includes broad phrases like 'write a note', 'help me write', and generic documentation terms that are not unique to NDIS. This can cause accidental invocation in unrelated contexts, leading the agent to apply NDIS-specific compliance, coding, or sensitive-data collection flows to users who did not intend to enter this regulated workflow.
The intake flow solicits participant names, NDIS numbers, support details, incidents, plan management type, and other sensitive personal information without a prominent upfront privacy minimization warning. In a healthcare/disability-support context, this increases the risk of oversharing regulated personal and health-adjacent data into the model and creates avoidable privacy and confidentiality exposure.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
**Category 01 — Assistance with Daily Life (Core)**
| Code | Description | When to use |
| ----------------- | -------------------------------------------------- | ------------------------------------------------------------------------------------------- |
| 01_011_0107_1_1 | Assistance with Self-Care Activities — Weekday | Personal care, hygiene support, dressing — weekday daytime |
| 01_011_0107_1_1_T | Provider Travel (to/from participant for Cat 01) | Travel time for daily living supports |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
**Category 04 — Community Participation (Core)**
| Code | Description | When to use |
| ----------------- | ------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------- |
| 04_104_0125_6_1 | Access Community Social and Recreational Activities — Standard (Weekday) | 1:1 community access, individual support for social/recreational activities |
| 04_104_0125_6_1_S | Saturday variant | Same — Saturday |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| Code | Description | When to use |
| ----------------- | ------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------- |
| 04_104_0125_6_1 | Access Community Social and Recreational Activities — Standard (Weekday) | 1:1 community access, individual support for social/recreational activities |
| 04_104_0125_6_1_S | Saturday variant | Same — Saturday |
| 04_104_0125_6_1_U | Sunday variant | Same — Sunday |
| 04_104_0125_6_1_P | Public holiday variant | Same — public holiday |
| 04_105_0125_6_1 | Innovative Community Participation — Weekday | Specialised or intensive programs for participants needing more targeted community engagement |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| ----------------- | ------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------- |
| 04_104_0125_6_1 | Access Community Social and Recreational Activities — Standard (Weekday) | 1:1 community access, individual support for social/recreational activities |
| 04_104_0125_6_1_S | Saturday variant | Same — Saturday |
| 04_104_0125_6_1_U | Sunday variant | Same — Sunday |
| 04_104_0125_6_1_P | Public holiday variant | Same — public holiday |
| 04_105_0125_6_1 | Innovative Community Participation — Weekday | Specialised or intensive programs for participants needing more targeted community engagement |
| 04_210_0125_6_1 | Community, Social and Recreational Activities — Activity Cost | Claim activity/program costs directly (camps, fees) — equally fractioned among participants in group |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| 04_104_0125_6_1 | Access Community Social and Recreational Activities — Standard (Weekday) | 1:1 community access, individual support for social/recreational activities |
| 04_104_0125_6_1_S | Saturday variant | Same — Saturday |
| 04_104_0125_6_1_U | Sunday variant | Same — Sunday |
| 04_104_0125_6_1_P | Public holiday variant | Same — public holiday |
| 04_105_0125_6_1 | Innovative Community Participation — Weekday | Specialised or intensive programs for participants needing more targeted community engagement |
| 04_210_0125_6_1 | Community, Social and Recreational Activities — Activity Cost | Claim activity/program costs directly (camps, fees) — equally fractioned among participants in group |
The skill’s guardrails say not to write clinical or medical content for support worker notes, yet the SOAP example and related instructions explicitly invite clinical assessment and therapeutic planning language. This inconsistency can cause the agent to cross professional-scope boundaries, generate regulated clinical content without sufficient qualification checks, and expose users to unsafe or non-compliant documentation guidance.
The skill says it must not provide Behaviour Support Plan content, but the checklist instructs the agent to reference health or behaviour support protocols in notes. Even if intended as documentation guidance, this creates ambiguity that may lead the agent to reproduce or elaborate restricted behaviour-support content beyond its allowed scope.
No suspicious patterns detected.