Security audit
Security checks for vulnerabilities and agentic risk
This skill is a planning guide for designing agent-assisted company functions and does not contain executable code, hidden installation steps, or credential/data access instructions.
Before installing, treat this as a strategic planning skill: use it to map functions and define oversight, but do not allow agents to handle finance, legal, HR, customer-facing, or publishing workflows without explicit scoped tools, human approval points, rollback criteria, and audit logs.
The trigger phrases are broad business-language prompts such as 'agents for my business' and 'which skills do I need', which are likely to match ordinary conversation rather than a clear request for this specific skill. That can cause unintended activation, leading the agent to steer users into organization-automation workflows when they may have been asking a general business or strategy question.
The section 'Create a custom skill when:' gives broad conditions such as 'No existing skill covers the function' and 'Domain expertise is unique' without defining concrete trigger phrases, scope boundaries, or exclusion cases. In a markdown skill document, this can lead to inconsistent or overly broad invocation criteria for creating custom skills.
No suspicious patterns detected.
