Security audit
Security checks across malware telemetry and agentic risk
The skill is not malware, but it can automatically make persistent changes to other skills and memory notes with broad activation triggers, so it needs review before installation.
Install only if you intentionally want an agent rule that can edit skills and update memory records. Before using it, narrow the trigger conditions, require explicit confirmation or a dry-run diff before edits, and clarify whether MEMORY.md writes are allowed. I found no executable payloads, credential handling, exfiltration, or destructive behavior in the artifacts, so this is a Review concern rather than a malicious finding.
63/63 vendors flagged this skill as clean.
No suspicious patterns detected.
