Security audit
Security checks for vulnerabilities and agentic risk
This is a markdown-only language-learning skill with coherent personalization features and no executable code, hidden commands, or privileged behavior.
Safe to install for language-learning help. Share only the personal context needed for better examples, and avoid sensitive personal details unless you intentionally want them used in practice material.
The skill metadata describes broad capabilities but does not define when the skill should be invoked or what requests fall outside its scope. In an agent environment, ambiguous scope can cause over-invocation, unintended handling of unrelated user data, or use of the skill in contexts where its guidance is unreliable, increasing privacy and safety risk.
The skill explicitly encourages use of personal details such as name, city, profession, and ongoing progress tracking, but provides no notice about data minimization, retention, or user consent. In practice, this can lead users or the hosting agent to disclose and store unnecessary personal information, creating avoidable privacy exposure if logs are retained, shared, or reused.
No suspicious patterns detected.
