Security audit
Security checks for vulnerabilities and agentic risk
This skill only provides instructions for turning existing research findings into a ranked report, with no code execution, persistence, credential use, or data exfiltration behavior found.
Before installing, be aware that common words like merge, format, rank, and report may invoke this skill more often than intended. It is otherwise a small markdown-only synthesis helper with no observed code execution, persistence, credential handling, or destructive behavior.
The declared trigger 'merge' conflicts with a built-in command name, creating a shadowing condition where routine command usage may invoke this skill instead of the expected native behavior. This increases the chance of accidental execution and can disrupt trusted workflows or redirect data handling into the skill unexpectedly.
The trigger 'format' is also a common built-in command/action name, so defining it as a skill trigger can shadow expected platform behavior. Because formatting requests are frequent and generic, this materially raises the likelihood of unintended skill activation and output manipulation in unrelated contexts.
The trigger list uses very generic terms like 'merge', 'rank', 'format', and 'report', which are common words likely to appear in normal user requests. In an agent environment, this can cause accidental invocation of the skill outside its intended context, leading to unintended processing, command shadowing, or workflow interference.
No suspicious patterns detected.
