Security audit
Security checks for vulnerabilities and agentic risk
This is a plain Markdown guide for requesting, editing, and organizing client testimonials, with no code execution or hidden behavior.
Before installing, treat this as marketing workflow guidance. Use it only with clients who have agreed to provide testimonials, confirm approval for edits and attribution, and protect any testimonial spreadsheet or document that contains client-identifiable information.
The description says to use the skill when someone "needs social proof" or "wants to collect feedback," which are broad, common situations rather than narrowly scoped trigger conditions. Because the file does not provide explicit trigger boundaries or negative examples, this could cause unintended invocation in unrelated feedback or marketing contexts.
The skill explicitly recommends storing identifiable testimonial data such as client name, company, quote, permission status, and usage history, but it does not include a clear privacy, retention, or consent safeguard beyond a general approval note earlier in the document. In contexts involving personal data, this can lead to over-collection, unauthorized reuse, or retention of client-identifiable information without adequate notice or controls.
