Security audit
Security checks for vulnerabilities and agentic risk
This is a prompt-only elevator outage planning skill with clear safety boundaries and no executable, network, credential, or persistence behavior.
Before installing, treat this as a logistics template only. Avoid entering unnecessary medical or resident-identifying details, follow official building instructions, and use emergency services or building emergency contacts for trapped people, injury, distress, fire, smoke, power hazards, or unsafe stair use.
The acceptance criteria explicitly require public-facing documentation to be English only. This is a natural-language policy constraint that forces a specific language choice, and the file does not indicate user opt-in or a documented compliance-based reason for the restriction.
The language audit states that content must be English only, reinforcing a mandatory locale policy. Under the policy rules, forcing a specific language without offering choice or clear justification is a reportable issue.
The trigger phrase "building access coordination" is much broader than the skill's stated purpose of planning for elevator outages. Because it lacks the outage-specific constraint present in the other triggers, it may cause unintended invocation for generic access, security, or facilities requests.
The manifest sets "language": "en", which implies the skill is fixed to English. Under the policy, language constraints should offer user choice or be clearly documented as necessary for a region-specific or compliance-specific use case, which is not stated here.
