Security audit
Security checks for vulnerabilities and agentic risk
This is a Portuguese copywriting-routing skill with broad activation terms, but it contains no code execution, credential use, persistence, or hidden data access.
Install this if you want a Portuguese-oriented copywriting assistant that routes work by marketing-copy type. Be aware that common trigger words like email or offer may activate it for some ambiguous requests, so clarify when you do not want copywriting help.
The skill description says it should be used for 'QUALQUER solicitação de copywriting,' which creates an overly broad invocation surface. That can cause the agent to intercept many unrelated or borderline requests and impose its own routing/persona workflow, increasing the chance of prompt hijacking, instruction override, or unintended handling of sensitive business content.
The skill content is written to operate in Portuguese and includes fixed response behaviors without any user opt-in for language preference. Enforcing a specific language can degrade transparency, cause misunderstanding of generated marketing content, and create a mismatch between user intent and skill behavior, especially when the skill is broadly invoked.
The trigger list includes broad, common terms such as "copy," "email," and "offer," which can cause the skill to activate in contexts the user did not intend. In an orchestrator skill that routes requests to multiple specialists, accidental invocation can misroute user input, override more appropriate skills, and increase prompt-surface exposure across unrelated workflows.
The skill description is written only in Portuguese, which may impose a language/locale assumption without any opt-in or explanation that the skill is intended for a Portuguese-speaking context. This can conflict with language-choice expectations when no locale limitation is documented.
No suspicious patterns detected.
