Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed workflow-only skill for adapting ideas from reference projects into original project changes, with no bundled code execution or persistence.
Use this skill for explicit project-level adaptation from named reference systems. Before installing or invoking it, define which repositories and files are in scope, confirm licensing/provenance for private or third-party material, and review any generated plan or edits before applying them.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
- ID: `fec-alchemy`
- Category: `project-evolution`
- Version: `2.9.0`
- Source: `skills/fec-alchemy/SKILL.md`
## Description
The skill description is broadly phrased around 'absorbing ideas, capabilities, workflows, architecture, quality systems, ecosystem extensions, or engineering practices from any reference system,' which can match many normal requests involving comparison, migration, learning from examples, or general project improvement. Overbroad activation increases the chance the skill is invoked in contexts where its procedures encourage large-scale repository reading, external reference ingestion, and project-wide modification planning beyond what the user specifically asked for.
The package description defines a very broad activation scope: 'absorbing ideas, capabilities, workflows, architecture, quality systems, ecosystem extensions, or engineering practices from any reference system' can match a wide range of normal engineering requests. In agent ecosystems where descriptions are used for routing or invocation, this increases the chance the skill is selected in unrelated contexts, which can lead to overreach, unexpected file access, or application of its transformation workflow where it was not intended.
No suspicious patterns detected.