Security audit
Security checks for vulnerabilities and agentic risk
This is a narrow recruiting-platform guide that handles applicant data and candidate decisions, but those actions are disclosed, purpose-aligned, and not backed by hidden code or persistence.
Install only if you intend the agent to help operate a logged-in Bang.AI recruiting account. Review candidate details before any approve/reject action, avoid unnecessary copying or sharing of applicant information, and treat candidate data as sensitive personal information subject to your organization’s hiring and retention policies.
The skill describes access to candidate lists and detailed profiles containing personal and potentially sensitive employment data, but provides no privacy or data-handling warning. This omission can normalize broad access, disclosure, or unnecessary processing of applicant information in a way that increases privacy and compliance risk.
The skill explicitly instructs users to approve or reject candidates but does not warn that these actions modify real applicant records and can directly affect people’s hiring outcomes. In an agent setting, omission of this consequence increases the chance of accidental or overly broad bulk actions, especially because the skill frames the workflow as routine platform operation.
No suspicious patterns detected.
