Security audit
Security checks for vulnerabilities and agentic risk
This is a Spanish copywriting guidance skill with no executable code, persistence, credential access, or hidden data handling.
Installers should understand that this skill is aimed at Spanish-language persuasive sales copy and may produce direct, urgency-driven marketing language. Review generated claims, testimonials, scarcity, guarantees, and regulated-industry copy for truthfulness and compliance before publishing.
The activation description is overly broad and repeatedly says to use this skill 'SIEMPRE' for a wide range of loosely related persuasion, writing, and selling requests. That can cause the agent to invoke this skill in contexts where a narrower or safer skill would be more appropriate, increasing the risk of misrouting, overreach, and policy bypass through incorrect tool selection.
The skill hard-codes a linguistic variant ('usar vos', Rioplatense tone) rather than defaulting to the user's language or asking for preference. While not a direct security flaw, this can override user intent, reduce transparency, and make the system behave unexpectedly, which is a quality and trust issue in agent behavior.
SQP-3 applies to all file types and covers language or locale policy violations. This file presents all instructional content in Spanish and does not provide any user opt-in, alternative language option, or justification for a Spanish-only constraint.
This markdown file presents all instructions and examples in Spanish, including region-specific second-person forms like "vos/tú", but does not indicate that the skill is limited to Spanish-speaking users or provide an opt-in language choice. Under the language/locale policy rule, forcing a specific language without user choice is a natural-language policy concern.
This markdown file contains natural-language instructional content exclusively in Spanish, including localized voseo phrasing such as "vos" and "querés." Under the language/locale policy rule, forcing a specific language without user opt-in can be a policy concern when no justification or alternative language option is provided.
