Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward document Q&A knowledge-base guide, with expected document upload, indexing, retrieval, and deletion behavior disclosed in the artifact.
Before installing, treat uploaded files as retained and searchable knowledge-base content. Avoid sensitive documents unless you know who can query the knowledge base, how indexed content is isolated, and how deletion or recovery works.
The skill encourages users to upload private documents into a retrievable knowledge base, but it does not clearly disclose that content will be stored, indexed, and potentially surfaced later in answers. In an enterprise or sensitive-document context, this can lead to unintentional retention and secondary disclosure of confidential data to future users or sessions.
The documented single-document deletion command lacks an explicit confirmation or safeguard, increasing the risk of accidental or unauthorized data loss. In a shared knowledge-base workflow, a mistaken filename or misuse of the command could remove important indexed content without a recovery checkpoint.
