Security audit
Security checks for vulnerabilities and agentic risk
This is a low-risk static reference skill, but its blockchain whitepaper content is generic and should not be treated as authoritative financial, legal, or compliance guidance.
Install only if you want static checklist and reference snippets. Verify regulatory, investment, compliance, and project-specific whitepaper claims against current authoritative sources, and do not use this skill as legal, financial, wallet, transaction, or production-security guidance.
The description says 'Use when working with whitepaper in blockchain contexts,' which is a broad condition rather than a specific trigger or constrained invocation scope. It does not define clear boundaries, explicit trigger phrases, or negative examples, so the skill could be invoked in many ordinary blockchain-related discussions involving whitepapers.
The 'When to Use' guidance is overly broad and lacks boundaries, which can cause the skill to activate for loosely related blockchain or finance tasks where authoritative, context-specific, or safety-critical guidance is needed. In a blockchain/finance context, ambiguous activation increases the chance of the agent relying on generic shell-backed reference content for compliance, risk, or due-diligence decisions, potentially producing misleading or overconfident outputs.
The inline documentation claims a specialized whitepaper tool, but the script is effectively a static text emitter with generic placeholder material unrelated to whitepaper analysis. In an agent setting, deceptive or inaccurate self-description is dangerous because it can cause inappropriate invocation and over-trust in low-quality output, especially in blockchain and compliance workflows.
The command descriptions and declared purpose present this as a blockchain whitepaper reference tool, but the actual outputs are broad generic investment, compliance, and risk text. This mismatch can mislead downstream agents or users into trusting the tool as domain-specific authority, causing incorrect decisions or unsafe automation based on irrelevant placeholder content.
No suspicious patterns detected.
