Security audit
Security checks for vulnerabilities and agentic risk
This is a prompt-only sales copy skill with no execution or persistence, though users should avoid pasting sensitive customer data and review outputs before sending.
Installers should treat this as a sales-writing assistant, not an automated sales system. Review all generated claims, discounts, guarantees, urgency, and customer stories before sending, and avoid pasting customer PII, confidential pricing terms, legal commitments, or internal procurement details unless authorized.
prompt.txt:10Untrusted User Input Is Directly Interpolated into Privileged Prompt Context
The trigger definition is extremely broad and explicitly says to invoke the skill even for casual phrasing, which increases the chance of the skill being selected for loosely related user requests. In an agentic environment, overbroad routing can cause unintended collection of sensitive sales context, generation of manipulative persuasion content when not requested, or suppression of more appropriate skills through prompt-space capture.
The 'When to Trigger This Skill' section lists many everyday phrases such as 'help me negotiate' and 'write a proposal' without qualification, making the invocation boundary ambiguous. This broad matching can lead to accidental activation on common workplace requests, causing misrouting, unnecessary exposure of user content to the skill, and generation of persuasive sales tactics outside the user's actual intent.
Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.
The exact framing and sequence to use when stating the price. Should the user anchor high first? Break it into monthly? Compare to cost of the problem? Write the actual words to say or type.
**2. How to Defend This Price**
If they push back, what do you say? Write the exact 2–3 sentence response that holds the price with confidence while reaffirming value. Do not apologize for the price.
**3. Discount Strategy (use only as last resort)**
If a discount is needed to close, how to structure it so you get something in return (annual commitment, referral, testimonial, faster decision). Write the exact offer: "I can do X if you Y by Z."
The README explicitly tells users to paste customer messages into email, LinkedIn, or WhatsApp and elsewhere encourages pasting exact customer words, but it provides no warning about handling personal, confidential, or commercially sensitive data. In a sales workflow, customer messages often contain names, contact details, pricing discussions, procurement information, and internal business context, so normalizing copy/paste into external channels without privacy guidance can lead to data leakage or policy violations.
The metadata sets 'language: en' and the document provides no indication that users may choose another language or that the English-only constraint is required for a justified regional purpose. This can violate language/locale policy when the skill is presented as generally applicable.
No suspicious patterns detected.