Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed customer-success advisory guide with narrow local memory and no executable or hidden high-impact behavior.
Install only if you want the agent to remember customer-success strategy details in ~/cco/memory.md and potentially engage on retention, churn, renewals, and expansion topics according to the activation preferences you approve during setup.
The setup instructs the agent to "start naturally" whenever it infers the user needs CCO-level help, before any scoped activation preference has been established. This creates a real prompt-scope problem: the skill may activate on loosely related business conversations and influence responses without clear user intent, causing unintended persistence and overreach.
The proposed activation triggers are broad and proactive, including engaging whenever customer success topics arise and automatically jumping into renewal or expansion discussions. In a conversational agent, such wide triggers can cause unsolicited role takeover, misrouting of general business questions into this skill, and collection of customer-success context beyond what the user intended.
No suspicious patterns detected.
