Security audit
Security checks for vulnerabilities and agentic risk
This is an informational Turkish company post-incorporation checklist skill with no executable behavior or hidden access requests.
Before relying on it, treat the checklist as general informational guidance and verify current Turkish tax, SGK, e-invoicing, and company-law requirements with official sources or a qualified professional.
The trigger condition is very broad: it includes a generic catch-all for 'any question' about post-incorporation processes in Turkey. Overly broad routing can cause the skill to activate unintentionally for adjacent topics, increasing the chance of irrelevant or stale compliance guidance being surfaced when a more precise source should be used.
The description is primarily in Turkish but includes the English directive "Use when asked about company setup in Turkey..." without indicating whether the skill should respond in Turkish, English, or based on user preference. This can create a language-policy issue because the file implicitly embeds a locale/language assumption without an explicit opt-in or choice.
This markdown file contains user-facing natural-language content only in Turkish. Under the language/locale policy, forcing a specific language without user opt-in can be a policy issue unless the regional constraint is explicitly documented and justified.
