Security audit
Security checks for vulnerabilities and agentic risk
This markdown-only audit skill has no executable payload, but it directs broad autonomous audits and immutable logging of inspected artifacts without clear scope or privacy controls.
Review this carefully before installing. It is not malware based on the inspected files, but you should only use it where you are comfortable with broad audit instructions and should require explicit user approval and redaction before any persistent or immutable logging of private code, contracts, financial records, or personal data.
The skill description grants very broad authority across financial, legal, technical, and ethical domains without defining activation boundaries, user-consent requirements, or operational limits. In an agent setting, this can cause over-collection, overreach into sensitive tasks, and unsafe invocation in contexts the skill is not qualified or authorized to handle.
The protocol explicitly promises 'immutable logging of all inspected artifacts' without any disclosure of privacy, retention, consent, or data-minimization controls. Logging sensitive code, contracts, credentials, personal data, or proprietary materials immutably can create permanent confidentiality and compliance exposure that cannot be reversed once recorded.
No suspicious patterns detected.
