Security audit
Security checks for vulnerabilities and agentic risk
This skill shows a local system status dashboard and its open-port reporting is disclosed and proportionate to that purpose.
Install this only if you are comfortable with the agent displaying local host health details, including listening TCP ports, in the conversation where the skill is used. Avoid using it in shared or public contexts where service exposure should remain private.
The trigger language is broad enough to match routine requests for general system information, which can cause this skill to run in situations where the user did not specifically request network or host telemetry. Because the skill exposes system-health details and open ports, over-broad invocation increases the chance of unnecessary disclosure of environment details.
The skill description presents the output as a harmless status dashboard but does not warn that listing top open network ports can reveal sensitive service exposure such as SSH, databases, or internal infrastructure components. In shared, logged, or untrusted contexts, this information can aid reconnaissance and targeting.
