Security audit
Security checks for vulnerabilities and agentic risk
This is a document-only creative prompt helper with no executable code, persistence, credential use, or hidden high-impact behavior.
Reasonable to install if you want a VisHalo-focused creative brief and prompt-planning helper. Be aware that broad triggers may activate it for generic AI image or video requests, so check which skill is active before sharing sensitive creative assets or unreleased campaign details.
The trigger keyword "ai image" is broad and likely to match many ordinary image-generation requests unrelated to this specific skill. This can cause the skill to be invoked inappropriately, increasing the chance of unintended routing, user confusion, and oversharing of prompts or context to a skill the user did not intend to use.
The trigger keyword "ai video" is highly generic and ambiguous, making it likely to overlap with a wide range of unrelated user requests. In a routing system, this can let the skill capture traffic beyond its intended scope, which is a security and safety concern because users may not realize a third-party skill is being selected.
The manifest sets the language to "en", which indicates a fixed language/locale choice. There is no visible opt-in, multilingual option, or documented justification showing that the English-only constraint is required.
