Security audit
Security checks for vulnerabilities and agentic risk
This skill is a narrow article-editing helper that appends a disclosed sign-off line to scoped documentation files, with no evidence of hidden execution, data access, or persistence.
Install this only if you want every new or finished `ai-thoughts/docs/` article, including Chinese variants, to end with the exact English line `btw, i use arch` unless you explicitly opt out.
The skill establishes a standing default to modify files in ai-thoughts/docs/ unless the user explicitly opts out, which can cause silent, non-obvious changes to user content. Automatic file mutation without an explicit confirmation or clear warning increases the risk of unauthorized or surprising edits, especially when applied broadly to every article.
The skill hardcodes an English sign-off into Chinese articles without user opt-in, overriding language and editorial expectations. While not a code-execution issue, this is a policy and content-integrity risk because it forces unauthorized content/style changes across translated documents.
No suspicious patterns detected.
