Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed monitoring and archiving helper; it has privacy-sensitive uses, but the artifacts are coherent with that purpose and contain no hidden execution or exfiltration behavior.
Install this only if you want an agent to maintain a local archive of followed people, topics, and feeds. Before enabling scheduled checks or platform integrations, decide which sources are appropriate to monitor, what accounts or APIs may be used, how long archived summaries should be retained, and whether monitoring a person or private/community source is allowed by law and platform terms.
The skill description presents monitoring, alerting, and searchable archiving as ordinary functionality without warning users that it may collect, retain, and correlate content across platforms. That omission can cause users to enable persistent tracking or storage without understanding the privacy implications, especially when following named people or aggregating behavior over time.
The activation examples are broad enough that the skill could be invoked for loosely related requests involving people, topics, or summaries without clear boundaries or consent checks. In a monitoring-and-archiving skill, ambiguous invocation increases the chance of unintentional surveillance, over-collection, or retention of third-party content beyond what the user explicitly requested.
No suspicious patterns detected.
