Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward API-backed career roadmap generator with disclosed assessment data inputs and no local execution or persistence behavior.
Before installing, understand that roadmap generation sends your assessment details, session identifier, timestamp, and optional user ID to the provider's API. Avoid including sensitive personal information beyond what is needed for career-roadmap advice.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## References
- **Kong Route:** https://api.mkkpro.com/career/noc-engineer
- **API Docs:** https://api.mkkpro.com:8056/docs
This markdown file documents collection of sessionId, userId, and timestamps as part of requests, which are user-related tracking fields. The description does not include any warning or disclosure about how this data is used, stored, or shared, even though the skill behavior could affect user privacy.
This is a manifest/config file, so vague-trigger review applies. The endpoint is described only as 'Generate Roadmap' / 'Generate personalized NOC engineering roadmap' without specifying when it should be invoked, what input conditions qualify, or any exclusion constraints, which makes activation scope overly broad in a skill context.
No suspicious patterns detected.