Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed, read-oriented debugging workflow with sensible safeguards around secrets and production changes.
Before installing, be aware that the skill may inspect logs, git metadata, dependency versions, listening ports, and environment variable names during debugging. It explicitly says not to print secrets or raw production data and requires approval for production-changing actions, so use it where that diagnostic visibility is acceptable.
The section labeled 'User-facing concise summary' provides only German field labels ('Gefunden', 'Gefixt', 'Beweis', 'Offen') for end-user communication. This imposes a specific language on user-facing output without opt-in or any documented reason, which matches the language/locale policy violation criteria.
Declared permissions with no matching code capability may indicate removed functionality or pre-staging for future abuse.
Declared permissions with no matching code capability may indicate removed functionality or pre-staging for future abuse.
Declared permissions with no matching code capability may indicate removed functionality or pre-staging for future abuse.
No suspicious patterns detected.
