Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed arbitrage-analysis helper that stores limited local notes and does not request credentials, trade execution, or hidden network access.
Before installing, be comfortable with the skill keeping local notes in ~/arbitrage/. During setup, choose a narrow activation preference if you only want it used when you explicitly ask for arbitrage analysis. Do not provide exchange keys, wallet secrets, or broker credentials; the skill says it does not need them.
The template leaves activation criteria blank, which can cause the skill to be invoked too broadly or without clear user intent boundaries. In a skill that persists files and tracks market-related preferences, ambiguous triggering increases the chance of unintended activation, unnecessary data retention, or acting on loosely related financial prompts.
The setup instructions ask to 'Clarify when this skill should activate' but provide overlapping and contradictory options such as 'whenever the user mentions arbitrage' and 'only when the user asks directly.' This does not define a concrete trigger boundary and risks unintended invocation because ordinary discussion of arbitrage-related topics could activate the skill without a clear constraint or negative examples.
The skill instructs creation and maintenance of local files under the user's home directory without any explicit disclosure or consent step. While the actions are limited and not overtly dangerous, silent persistence can surprise users, create privacy concerns, and normalize filesystem writes without clear awareness.
No suspicious patterns detected.
