Security audit
Security checks for vulnerabilities and agentic risk
The skill is mostly static business guidance, but it includes operational security incident playbooks that are broader and higher-impact than its Chief Strategy Officer description makes clear.
Review the security incident-response material before installing. This skill appears non-executable, but an agent using it should treat credential resets, session revocation, network blocking, system isolation, breach notification, and ransom decisions as human-approved actions requiring legal/security leadership review.
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
- [ ] Firewall rules explicit (deny by default)
- [ ] Automatic security updates enabled
- [ ] Root login disabled
- [ ] Regular user with sudo for admin tasks
## Container Security
The manifest describes a Chief Strategy Officer skill focused on competitive analysis, strategic planning, growth roadmaps, and business portfolio management. This file instead contains operational cybersecurity incident response procedures, including breach handling, ransomware response, and regulatory notification steps, which are materially different from strategy leadership activities.
The file provides detailed operational guidance for triage, containment, credential revocation, ransomware response, DDoS mitigation, and breach notification. Those are specialized incident response capabilities that are not obviously required for a skill whose stated purpose is business strategy, competitive analysis, and portfolio management.
The ransomware playbook says 'Do NOT pay ransom (yet),' which weakens the safety guidance and can be read as keeping payment on the table without clear executive/legal controls. In a generic playbook, that ambiguity can pressure responders toward a harmful, legally risky, or counterproductive payment decision during a crisis.
No suspicious patterns detected.