Security audit
Security checks for vulnerabilities and agentic risk
This skill is a product-owner helper that stores backlog and product context locally, with no executable code or external data transfer found.
Choose the less proactive setup option if you only want help on explicit request, and avoid storing confidential business details in ~/product-owner/ unless local persistence is acceptable for your environment.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
integration: pending
## Product Context
<!-- Product name, description, target users -->
<!-- Business model, key metrics -->
## Team Context
The setup instructs the skill to ask for broad activation such as helping whenever the user is working on backlogs or user stories and to assist with sprint planning proactively. This can cause the agent to insert itself into many common product-workflow contexts without a narrowly scoped trigger, increasing the chance of overcollection of context, unwanted persistence, or action based on ambiguous user intent.
No suspicious patterns detected.