Security audit
Security checks for vulnerabilities and agentic risk
This banking skill is a disclosed workflow guide with local note-taking and conservative escalation rules, not an automatic banking or fund-transfer tool.
Before installing, be aware that this skill may create local banking workflow notes under ~/banking/. Do not store customer secrets, full account numbers, credentials, or regulated personal data there; use it as an operational checklist and escalation aid, not as legal advice or an automatic banking action tool.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- Unauthorized transaction suspected.
- KYC or sanctions bypass requested.
- Irreversible transfer requested without approvals.
- Legal interpretation requested as definitive advice.
The skill explicitly instructs the agent to persist internal notes in ~/banking/memory.md that may include jurisdiction, account scope, policy constraints, known failure points, incident patterns, and accepted communication templates. In a banking context, these notes can easily contain sensitive operational, customer, fraud-response, or security-control information, and the file-based persistence is requested without minimization rules, storage protections, retention limits, or warnings against storing secrets or regulated data.
No suspicious patterns detected.