Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed research-reporting workflow that searches the web and writes report files, with no evidence of hidden execution, credential access, exfiltration, or destructive behavior.
Before installing, expect this skill to perform broad web research, generate Markdown reports in English by default, save them under report/, and update index.md. Use it in a workspace where those report files and index entries are desired, and explicitly tell the agent if you need another language or do not want files written.
The skill says reports must be generated in English, and later repeats 'Write in English,' which forces a specific language regardless of user preference. This is a natural-language policy concern because no opt-in, fallback, or justification for the language restriction is provided.
The skill explicitly instructs the agent to create a report file and append an entry to index.md, which causes persistent workspace modification without any requirement for user awareness or consent. In an agent setting, silent file writes can overwrite content, pollute repositories, or create misleading artifacts, especially when combined with web-sourced content and dynamic filenames.
This line explicitly requires the final report to be written in English. Because the skill also supports non-English input and bilingual search, the fixed English-output rule is a locale/language restriction that is not presented as optional or justified.
No suspicious patterns detected.
