Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward writing assistant for freelancer client messages and does not request tools, credentials, persistence, or automatic sending authority.
Installers should treat the generated emails as drafts to review before sending, especially payment reminders that cite UK late-payment law or current interest rates. The skill does not appear to access private data or take actions on its own.
The invocation description is broad enough to match many ordinary writing or messaging requests, which can cause the skill to trigger outside narrowly intended freelancer-client scenarios. That increases the chance of prompt hijacking of general conversations and can override more appropriate system behavior or routing for unrelated communication tasks.
The rule 'UK English by default' imposes a locale choice unless the user specifies otherwise. This is a natural-language policy concern because it defaults users into a specific language variant rather than offering a neutral default or explicit opt-in.
No suspicious patterns detected.
