Security audit
Security checks for vulnerabilities and agentic risk
This is a document-only short-video scripting guide with no executable code, network use, credential handling, or persistence.
Installers should understand this skill is a writing template for short videos. The main caveat is that its trigger keywords are somewhat broad, so it may be selected for adjacent script or video-writing requests where another writing skill might fit better.
The trigger list is broad and generic enough to match many ordinary writing requests, which can cause the skill to activate outside its intended scope. While this is not a code-execution issue, overbroad activation can lead to unintended routing, user confusion, and inappropriate application of the skill in contexts where a more suitable tool should handle the request.
The trigger keywords are overly generic for common writing-assistance requests such as 'write video' and 'script structure', which can cause the skill to activate outside its intended scope. Over-broad activation increases the chance of unintended prompt interception, routing conflicts, or inappropriate application of the skill to general user requests, though the skill itself is otherwise low risk and contains no obviously malicious behavior.
The trigger phrase "write video" is ambiguous and not narrowly scoped to short-video script generation. It could overlap with common user phrasing about video creation or editing, increasing the chance of unintended invocation.
The manifest sets the skill language to "en" with no indication that users can choose another language or that the restriction is required for a justified regional purpose. This creates a natural-language policy concern because it hard-codes a locale preference without opt-in.
The checklist explicitly states "English-first documentation," which is a natural-language locale preference. Under the policy rules, forcing a specific language without user choice or a documented region-specific justification is a policy concern.
No suspicious patterns detected.
