Security audit
Security checks for vulnerabilities and agentic risk
This Markdown-only skill coherently documents a private Discord controller-to-worker delegation flow and does not include hidden execution, persistence, or unrelated data access.
Install only if you intend to run a Discord controller-to-worker setup. Configure a private worker lane, restrict accepted messages to one trusted controller bot, one lane, and a fixed task prefix such as [WORKER_TASK], and avoid broad conversational triggers for production use.
The quick trigger example uses broad natural-language phrasing that could easily overlap with ordinary conversation directed at the bot. In a Discord controller-to-worker delegation flow, ambiguous activation text increases the chance of unintended task delegation, causing the worker bot to process content that was not meant to enter the private worker lane.
The orchestrated trigger wording is ambiguous because it describes delegation in free-form text without clear constraints on what qualifies as a valid handoff. In this skill's context, the controller bot relays tasks between Discord contexts, so loose trigger matching can enable accidental or attacker-induced forwarding of messages into the worker lane and relay of unintended results back to DMs.
No suspicious patterns detected.
