Security audit
Security checks for vulnerabilities and agentic risk
This skill performs public procurement research about a named company and does not show hidden code execution, persistence, credential access, or destructive behavior.
Before installing, be aware that using this skill will likely run live web searches for the company you name and may query procurement or business-information sites. Use full legal company names for accuracy, and review outputs as research estimates because the skill includes inference about customer concentration, regions, and cash-flow health.
The activation text is broad enough to match common business-analysis requests such as understanding a company's customers, revenue sources, or competitive position. That can cause the skill to trigger unexpectedly, initiating external searches and generating sensitive profiling outputs when a more general analysis skill would have been appropriate.
The skill performs live searches against third-party procurement and business-information sites, but the user-facing description does not clearly disclose that external requests will be made. This can create privacy and transparency issues because user-supplied company names and investigative intent may be sent to outside services without explicit user awareness.
