Security audit
Security checks for vulnerabilities and agentic risk
This is a prompt-only phone notification checklist with clear boundaries and no code, credentials, network access, or persistence.
This appears safe to install as an English prompt-only checklist. Users should keep critical safety, medical, caregiver, school, work, and emergency alerts enabled unless they independently choose otherwise, and should not provide private message contents or credentials.
The checklist explicitly requires the skill to be "English only," which is a natural-language policy constraint. Under the policy rule, forcing a specific language without user opt-in or a documented justification is a violation.
The manifest sets language: "en", which is a natural-language locale constraint. Under the policy, forcing a specific language without user opt-in or a documented justification can be a policy violation, and this file does not indicate that the skill is region-specific or offers an alternative language choice.
This manifest file defines trigger keywords such as "notification reset routine," "reduce phone notifications," and "mute noisy apps" that overlap with ordinary user requests rather than narrowly identifying this specific skill. The file also provides no exclusion conditions or negative examples to clarify when the skill should not activate.
