Security audit
Security checks for vulnerabilities and agentic risk
This is a Spanish-language sandbox workflow checklist with no executable code or hidden behavior.
Before installing, confirm you want a Spanish-language SOP that may activate for development tasks involving scripts, configuration, infrastructure changes, or deployments that need sandbox validation. It does not appear to install code, persist changes, use credentials, or run commands by itself.
The skill description and operating instructions are entirely in Spanish, but the file does not state that Spanish is optional, user-selected, or required for a documented regional context. This can violate language/locale policy when users have not opted into that language.
The trigger activates on receiving TASK_ASSIGNED for implementing scripts, configuration, infrastructure changes, or deployments requiring sandbox validation, which covers a very wide range of common development work. The file does not provide explicit inclusion/exclusion examples or narrower trigger constraints, so unintended invocation overlap is plausible.
The manifest description "Descripción de SOP: dev" is extremely broad and does not specify concrete trigger phrases, scope boundaries, or exclusion conditions. In a manifest file, this kind of generic description can contribute to ambiguous activation behavior because it does not clearly indicate what user requests should or should not match the skill.
The only user-facing description in the manifest is written in Spanish, and the file does not indicate that language selection is optional or that the skill is intentionally restricted to a Spanish-speaking context. This may violate language/locale policy guidance when a specific language is imposed without opt-in or documented justification.
No suspicious patterns detected.
