Security audit
Security checks for vulnerabilities and agentic risk
This skill is a documentation-maintenance helper whose repository reads, doc edits, navigation updates, branch commits, and optional GitHub issue creation fit its stated purpose.
Install this if you want an agent to inspect repository changes and keep documentation current. Use review-first mode when you want to approve proposed edits before files are changed, and be aware that direct-apply mode can modify documentation files, update doc-site navigation, and create a local branch commit; issue mode can create a GitHub issue using your authenticated gh session.
This markdown skill description explicitly tells the agent to write doc updates, edit files, commit to a branch, and possibly modify navigation/config files. While it mentions a 'Review first' option, the overall description does not clearly warn users that running the skill may change repository content and create commits, which can affect user data and system state.
The instruction 'Commit to a branch — never push directly to main' imposes a specific workflow choice in natural language. Although not a language-selection issue, this does not match the defined SQP-3 policy scope, so it should not be reported unless it concerns language or locale; therefore no valid SQP-3 finding is present.
No suspicious patterns detected.
