Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent internal communications helper, but it tells the agent to broadly search company Slack, email, documents, and calendars without clear privacy limits.
Install only if you are comfortable with the agent using connected company systems for internal communications. Before use, explicitly limit sources to approved channels, documents, and date ranges; avoid private inboxes, restricted channels, HR, legal, security, finance, personnel, customer, or deal-sensitive material unless specifically authorized; and review outputs before sharing broadly.
The skill description says it should be used whenever asked to write some sort of internal communications, which is a broad activation scope. Overly broad routing can cause the agent to invoke this skill for loosely related requests, increasing the chance of inappropriate context loading or unintended instruction influence from auxiliary files.
The keyword list includes vague terms such as 'updates' and 'weekly update' that are common across many unrelated tasks. Generic trigger terms can cause accidental invocation, making the skill apply internal communication guidance in contexts where it does not belong and expanding exposure to any risky instructions in referenced resources.
The skill explicitly directs the agent to collect information from Slack, Google Drive, Email, and Calendar, including signals like channel size, reactions, views, and response volume, but provides no constraints on authorization, minimum necessary access, or handling of sensitive/internal data. In an internal communications context, this can cause over-collection of confidential business, personnel, or customer information and inclusion of data from sources the user did not intend to authorize for this task.
The skill explicitly encourages broad access to internal Slack, email, calendar, documents, and external press sources to assemble a company-wide newsletter, but it provides no guidance on filtering for confidentiality, minimizing data collection, or obtaining user confirmation before using sensitive sources. In a large company context, this creates a real risk of exposing private communications, confidential documents, executive-only announcements, or meeting materials that were not intended for broad redistribution.
The instructions expand the skill from formatting internal communications into proactively collecting and synthesizing information from broad company systems. That scope expansion can cause unnecessary access to sensitive internal discussions and creates a data-collection behavior not clearly justified by the stated skill purpose.
The skill directs the agent to survey Slack, email, and documents across the company to identify common confusion topics, which is broader than necessary for a communications-writing helper. This increases the chance of over-collection, exposure of confidential information, and use of employee communications outside their original context.
The instructions encourage broad review of Slack, email, and documents without any privacy, confidentiality, or data-minimization warnings. In a company environment, those systems often contain HR, legal, security, or personal data, so unrestricted review can expose sensitive information during summarization or retrieval.
