Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed EIN.LLC continuation helper that fetches a pinned archive and uses caller-supplied files, with safeguards against payment, filing, and claim actions.
Install only if you intend to use EIN.LLC's continuation workflow and are comfortable providing the named context, customer key, email, grant, and state files to that flow. Keep the work directory and state file private, and do not use this as authority to claim, pay, attest, register, or file on behalf of a human.
Referenced artifact was not completely inspected
dy released continuation and point it at caller-owned files. The executable is `scripts/continuation.mjs`. The byte pins are `references/continuation-pin.json`.
Referenced artifact was not completely inspected
dy released continuation and point it at caller-owned files. The executable is `scripts/continuation.mjs`. The byte pins are `references/continuation-pin.json`.
Referenced artifact was not completely inspected
dy released continuation and point it at caller-owned files. The executable is `scripts/continuation.mjs`. The byte pins are `references/continuation-pin.json`.
Referenced artifact was not completely inspected
dy released continuation and point it at caller-owned files. The executable is `scripts/continuation.mjs`. The byte pins are `references/continuation-pin.json`.
The skill performs network access and likely reads local inputs, but it does not declare any explicit tool scope such as allowed-tools or permissions. That creates a trust and review gap: operators cannot easily enforce or understand the skill's external communication and environment access before execution, increasing the chance of unintended data exposure or unsafe use.
The code unconditionally sets LANG to "C" in the environment passed to the underlying continuation client. This imposes a specific language/locale behavior without offering the user a choice or documenting a justified regional constraint, which matches the language/locale policy violation category.
This JSON manifest file is in scope for vague-trigger review. The only activation-related cue visible here is the generic prefix "ein-activation-continuation/", but the file provides no explicit trigger phrases, scope limitations, or negative examples clarifying when this skill should or should not be invoked, which can lead to overly broad matching in systems that rely on manifest metadata.
No suspicious patterns detected.