Security audit
Security checks for vulnerabilities and agentic risk
This skill is a small, local RPG-themed self-development helper with no evidence of hidden access, persistence, network use, or destructive behavior.
Before installing, understand that this is a motivational framing tool for self-reflection, not a substitute for professional mental-health, coaching, or career advice. It appears local and low-risk from the inspected artifacts.
Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.
def _load_prompt_template(skill_name: str) -> str:
del skill_name
return PROMPT_TEMPLATE
def _normalize_key(key: Any) -> str:
Without declared permissions the skill's intent is opaque and cannot be validated.
This code file performs a file read operation by opening and reading SKILL.md, but there is no confirmation prompt, logging, or inline disclosure around that access. While the operation is low risk and likely benign, SQP-2 for code files asks to flag file access that lacks any form of user disclosure when it is not clearly surfaced to the user.
No suspicious patterns detected.