Security audit
Security checks for vulnerabilities and agentic risk
This skill is a plain Markdown decision journal that creates local decision-log files, with no evidence of hidden code, remote execution, credential access, or destructive behavior.
Before installing, decide where decisions/ will live and avoid putting sensitive business, financial, client, or personal details in synced or public repositories. Review generated entries before saving, and narrow or skip the optional automatic triggers if you do not want routine spending or project mentions to prompt logging.
The instruction triggers whenever the user mentions spending money on anything, which is a very broad condition that overlaps with ordinary conversation. The file does not provide constraints or negative examples to distinguish casual mentions from cases where the skill should actually activate.
The phrase 'When I start a new project (create a project file or say "starting [X]")' is not specific enough about scope, and 'starting [X]' is common language that could occur outside intentional skill use. The document does not define boundaries or exclusions for what counts as a qualifying project start.
The condition 'When I add a new tool or service subscription' is ambiguous because it does not define how the agent detects the event or distinguish substantive adoption from casual discussion, trials, or minor account changes. This can lead to unintended automatic entry creation without clear trigger boundaries.
The skill explicitly instructs the agent to create and update files in decisions/, including an index and decision entries, but does not clearly warn the user that using the skill will modify the local filesystem and may store sensitive business, financial, partnership, or personal decision data in plain files. In this context the behavior is core to the skill rather than covert, so the risk is limited, but users could unintentionally persist sensitive information or allow broad automated file edits without informed consent.
No suspicious patterns detected.
