Security audit
Security checks for vulnerabilities and agentic risk
This is a plain Markdown guidance skill for UAE clinic marketing, with no executable code, credential use, persistence, or hidden data access.
Before installing, treat this as jurisdiction-specific marketing guidance rather than legal advice, and ask the agent to confirm clinic stage, specialty, location, and preferred languages when needed. There is no evidence that the skill executes code or accesses private data.
The trigger list is very broad and includes many generic healthcare marketing phrases, which can cause the skill to activate in conversations where the user did not intend to invoke this specialized guidance. Unintended invocation can override more appropriate instructions, create compliance risk, and surface domain-specific recommendations in the wrong context.
The skill prescribes Arabic and English as mandatory for the audience without checking the user's actual preference or context. While not directly a security flaw, this can improperly constrain outputs, reduce user autonomy, and cause the agent to act on assumptions rather than explicit user intent.
No suspicious patterns detected.
