Security audit
Security checks for vulnerabilities and agentic risk
This is a prompt-only helper for writing honest subscription cancellation call scripts, with no code execution, network access, credential use, or persistence.
Installers should understand this skill helps draft scripts and checklists only; it does not cancel services for you. Avoid entering passwords, full payment numbers, one-time codes, or sensitive identity documents, consistent with the skill's own safety boundary.
The metadata specifies "Language: English," which imposes a language constraint. The file does not offer the user a language choice, opt-in, or a documented justification for restricting the skill to English only.
The statement "English/ASCII only; no non-English content" is a natural-language policy concern because it reinforces a language/locale restriction without user choice or a stated business or compliance need. This goes beyond metadata and presents the limitation as a requirement.
The manifest sets "language": "en", which imposes a specific language/locale in a user-facing skill. There is no indication elsewhere in the file that this is optional, user-selectable, or justified as a region-specific constraint.
This markdown file includes a sample activation prompt, "I need to cancel my gym membership... Write me a firm call script," as the install-first input, but it does not define a bounded set of trigger phrases or exclusion conditions. Because the skill is described as providing a "clear trigger" without specifying scope or negative examples, the invocation language may overlap with ordinary conversation about cancellations.
