Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple local game-tracking helper with no executable code, network behavior, credential handling, or destructive actions.
Install this if you want a local Markdown-based game organizer. Expect it to create or use a ~/games/ folder for game lists and logs; review that location first if you prefer a different storage path or do not want casual game mentions to prompt tracking offers.
The trigger 'User mentions game → offer to track it' is overly broad and can activate on casual or ambiguous references to games, causing unintended invocation of the skill. While not overtly malicious, broad triggers can lead to inappropriate context capture or unsolicited behavior that surprises users.
The instruction to create '~/games/' establishes persistent local storage without any stated user notice, consent, or explanation. Even though the stored content appears low sensitivity, silently creating files and directories on a user's system can violate user expectations and privacy boundaries.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- Build party/kids repertoire
## What NOT To Do
- Suggest games they don't own without asking
- Recommend complex games for casual group
- Forget player count constraints
- Ignore age appropriateness for kids
No suspicious patterns detected.