Security audit
Security checks for vulnerabilities and agentic risk
This is a documentation-only Nuxt 3 project-standard skill with no hidden execution, persistence, credential access, or unrelated authority.
Install this as a Nuxt 3 reference skill if you want agents to apply these project conventions. Be aware it may activate for many Nuxt-related requests, so choose a more specific route-protection or data-fetching skill when those narrow topics need deeper guidance.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
- ID: `fec-nuxt-project-standard`
- Category: `project-standard`
- Version: `2.9.0`
- Source: `skills/fec-nuxt-project-standard/SKILL.md`
## Description
The description says to use the skill when creating or reviewing a wide range of Nuxt-related topics, but it does not clearly define where the trigger scope ends or provide negative examples beyond a brief note about generic Vue architecture. This broad phrasing could cause unintended invocation for general Vue or web-architecture requests that only partially relate to Nuxt.
The manifest description explicitly states 'Chinese triggers include Nuxt, Nuxt 3,' which introduces a language-specific invocation policy. The file does not indicate that language selection is optional or explain why Chinese-specific triggering is required, so this can conflict with language/locale neutrality expectations.
This manifest file says to use the skill when 'creating or reviewing Nuxt 3 projects' and lists many broad Nuxt topics, but it does not define narrower trigger phrases, exclusions, or negative examples. That ambiguity could cause the skill to activate for general Nuxt discussion where a more specific routing, security, or data-fetching skill might be intended instead.
No suspicious patterns detected.