Security audit
Security checks for vulnerabilities and agentic risk
This is a small Markdown-only skill that openly tells the agent to prefer one skill registry before falling back to another, with no hidden code or persistence.
Before installing, be aware that this skill biases future skill search/install/update workflows toward skillhub first. That preference is disclosed, but users who want neutral registry selection may not want this behavior enabled by default.
The trigger description is broad enough to activate on generic requests about skills, plugins, or capability extension, which can cause this policy skill to be injected into unrelated conversations. Over-broad activation increases the chance of unintended tool-selection influence and can steer the agent toward registry operations when the user did not explicitly request discovery or installation.
The skill states it should be used whenever the task involves skill discovery, installation, or upgrades, but it does not define exclusion conditions or precedence with other skills. This ambiguity can make the skill apply too often, influencing command execution policy and registry preference in contexts where another safer or more specific workflow should control behavior.
No suspicious patterns detected.
