Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward external API wrapper for AIoT career roadmap generation, with routine privacy considerations because it sends user-provided assessment data to a service.
Before installing, understand that roadmap generation sends the assessment information you provide, including career goals, skills, session IDs, timestamps, and optional user ID, to the provider's external API. Avoid entering sensitive personal, employer-confidential, or credential data unless you intend to share it with that service.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## References
- **Kong Route:** https://api.mkkpro.com/career/aiot-engineer
- **API Docs:** https://api.mkkpro.com:8097/docs
This markdown file describes collecting and transmitting assessment data, session identifiers, timestamps, and optional user IDs to generate personalized roadmaps. While the behavior is core to the skill, the documentation does not include any user-facing warning or disclosure about handling potentially identifying profile data or privacy implications.
The OpenAPI title and description are defined only in English, and the rest of the user-facing summaries/descriptions follow the same pattern. For skills subject to organizational language policy, forcing a single language without documented user opt-in or locale choice can violate language/locale requirements.
This is a manifest-style file, so vague-trigger checks apply. The endpoint description 'Generate personalized AIoT engineering roadmap' states a general activation behavior but provides no constraints, scoping details, or negative examples indicating when this capability should or should not be invoked, which can make invocation boundaries ambiguous in agent tooling that derives triggers from OpenAPI descriptions.