Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed investor-research workflow that writes its own workspace files and delivers an Excel report, with shared-channel visibility as the main caution.
Install this only where web research, workspace file creation, and delivery of an investor XLSX are acceptable. For confidential prospecting, use a private chat or a per-team PicoClaw workspace because channel runs can post the finished file to that channel and workspace files may be readable by others sharing the same agent.
l (`web_search`, `web_fetch`), and `exec` with `python3` for the memory store (`scripts/store.py`). **Writes** its files under the working directory and reads t
l (`web_search`, `web_fetch`), and `exec` with `python3` for the memory store (`scripts/store.py`). **Writes** its files under the working directory and reads t
l (`web_search`, `web_fetch`), and `exec` with `python3` for the memory store (`scripts/store.py`). **Writes** its files under the working directory and reads t
l (`web_search`, `web_fetch`), and `exec` with `python3` for the memory store (`scripts/store.py`). **Writes** its files under the working directory and reads t
| `SKILL.md` | working — every operative rule, nothing else |
attached — only counted. If you run a bot for several people, the safest setup is one agent per team, each with its own workspace. **Scheduled runs** (cron jobs) continue a stored market without asking; anything that would need a question — a different scope, a shared folder — stops before the first search and reports the question instead.
(Slack, Telegram, file it printed (relative to the workspace is fine) — ONE file,
Discord, WeCom, …) <market>-investors.xlsx, arrives as an attachment in this chat.
Never attach the CSVs: they are the memory, not the deliverable.
Send it WITHOUT asking — in a channel too (see §6).
CLI (picoclaw agent) state the path.
cron job send_file in the job's run; it goes to the job's chat.
```(*PicoClaw* above). **In a channel, say once in the first reply that the finished Excel file will be posted here for everyone in it.** That notice is the only one: at the end, post the file without asking again. **Use a separate root per user or team whenever the session context names one.**
**There is no budget unless the user sets one.** By default the run continues until the
exhaustion rule is met — six empty rounds in a row, with the gates open — and `finish` allows
the stop. **Never ask the user for a budget.** If the user names a number ("use 10 rounds",
"quick scan"), pass it as `init --budget N`. **Sixty rounds is the backstop** for a run
without a budget; a user who explicitly asks for more gets their number after one sentence
on what it costs.permit persons to whom the Software is furnished to do so. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
No suspicious patterns detected.