Security audit
Security checks for vulnerabilities and agentic risk
This is a Spanish code-analysis assistant whose inspected code reads user-selected source files and prints analysis or generated documentation without hidden network access, file writes, or persistence.
Install this if you want a Spanish-language coding assistant for local code review and documentation suggestions. Review any future refactor, auto-fix, or self-repair action before applying changes, because those capabilities could modify code if implemented by the host agent or a later version.
The skill advertises capabilities that can affect code and references environment-related capability detection, but it does not declare any explicit tool scope or permissions boundaries. In an agent setting, missing scope declarations can cause overbroad access assumptions and make it unclear whether the skill may inspect sensitive environment data or invoke tools beyond what users expect.
The description promotes refactoring, documentation generation, and automatic assistance without clearly warning that these actions may modify user files. Users may invoke the skill expecting analysis-only behavior, while an agent could proceed with write operations that alter source code or project documentation unexpectedly.
The configuration and integration sections describe auto-fix and self-repair behavior, which can lead to automatic code changes without a strong safety boundary or explicit confirmation requirement. In a coding-agent context, this is more dangerous because autonomous modification of source files can introduce defects, overwrite user intent, or be abused to make stealthy changes across a repository.
This code file contains natural-language user-facing text that fixes the skill's interface to Spanish (Asistente de programación especializado). The policy requires flagging language or locale constraints when the skill forces a specific language without user opt-in or justification.
Multiple user-facing CLI messages and help text are emitted only in Spanish, such as usage instructions, analysis summaries, and command descriptions. This enforces a specific language for all users without offering a locale selection or documenting a justified restriction.
