Security audit
Security checks for vulnerabilities and agentic risk
This is a dealership marketing guidance skill with some privacy-sensitive CRM marketing advice, but its behavior is disclosed, purpose-aligned, and non-executable.
Install only if you want automotive dealership marketing assistance. For CRM, DMS, equity-mining, SMS, email, or direct-mail workflows, avoid pasting unnecessary customer records into prompts and confirm you have authorization, channel consent, opt-out handling, and applicable advertising/privacy compliance in place.
The manifest says to use the skill for 'any automotive retail marketing task,' which is a very broad activation condition without clear boundaries or exclusion criteria. This can cause unintended invocation for a wide range of ordinary dealership-related requests that may not specifically need this skill.
The skill encourages CRM/database mining, equity mining, and personalized outreach using customer and vehicle data, but it does not require upfront privacy, consent, minimization, or authorization checks before handling that data. In a dealership context, this can lead users to generate campaigns or scripts based on regulated personal information without confirming TCPA/privacy compliance, increasing risk of unauthorized marketing, misuse of customer records, and compliance violations.
No suspicious patterns detected.
