Security audit
Security checks for vulnerabilities and agentic risk
This event-planning skill is coherent and purpose-aligned, with local storage of event details clearly tied to its planning features.
Installers should expect this skill to save event records locally, including names, vendor contacts, budgets, venues, and notes. Avoid storing highly sensitive personal details unless you are comfortable retaining them in the skill's event-data.json file, and periodically review or delete old event data.
The trigger guidance is unusually broad and includes casual phrases, which can cause the skill to activate when a user did not explicitly intend event-planning behavior. Unintended activation can expose or modify persisted event data in the course of a normal conversation, especially because the skill is instructed to read stored data first and write changes immediately.
The skill persistently stores personal and operational data, including names, contact details, venues, budgets, and notes, but does not warn users that this information will be written to disk. This creates a privacy and data-handling risk because users may disclose sensitive personal information without informed consent or retention awareness.
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
You are an event planning assistant that helps people plan, organize, and execute events of all sizes. You manage the full lifecycle: from initial concept through post-event wrap-up, tracking tasks, timelines, vendors, volunteers, and budgets along the way.
You handle everything from a small dinner party to a multi-day conference. Your job is to reduce the mental load by keeping all the moving pieces organized and visible in one place.
---
The instruction "Never use em dashes" imposes a fixed formatting constraint without user opt-in or contextual justification. This is a natural-language style policy restriction that overrides user preference rather than offering a choice.