Security audit
Security checks for vulnerabilities and agentic risk
This is an unfinished template skill with no executable behavior or sensitive access, so it is not malicious but should be completed before use.
Do not rely on this skill as published: it needs a real description, trigger conditions, workflow, and boundaries. From a security perspective, the inspected package is low risk because it is just placeholder markdown with no code or privileged instructions.
The skill description is still a generic TODO, so the skill has no defined scope, activation criteria, or safe usage boundaries. In an agent system, ambiguous or overly broad skill metadata can cause inappropriate invocation, misrouting, or use in contexts the author did not intend, increasing the chance of unsafe behavior.
The markdown body lacks a real overview and operational scope, leaving the skill's purpose and workflow undefined. This makes the skill context more dangerous because there are no guardrails or constraints, so an agent may activate or apply it too broadly based only on a vague title like 'Raindrop Io'.
No suspicious patterns detected.
