Security audit
Security checks for vulnerabilities and agentic risk
This is a non-executable marketing planning skill whose guidance is disclosed and aligned with designing flash sales.
Before using the templates, confirm inventory, cart, sales, times, SMS opt-in language, and promotional claims against live business data and the laws/platform rules for the audience region.
Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.
## Threshold-Based Visibility Rules
| Stock Remaining (% of Flash Allocation) | Display Rule |
|---|---|
| 100–70% | No stock count needed — show discount and timer |
| 70–50% | Optional: "Selling fast" badge |
These templates encourage scarcity and social-proof claims such as units left, carts active, and units sold without clearly requiring that the numbers be accurate and verifiable at runtime. In a flash-sale skill, that omission is risky because operators may fill in persuasive but fabricated values, creating deceptive marketing and compliance exposure.
The templates repeatedly hard-code sale times in EST, starting with the teaser copy, without offering localization or noting that the timezone should be adapted to the recipient. This can violate a language/locale policy when content is sent to audiences outside that locale without explicit opt-in or a region-specific justification.
The file directs copywriters to 'Always name a specific end time in the local timezone of your primary audience,' and later examples hard-code EST. This can impose a locale choice on end users without offering a language/locale choice or documenting a justified regional limitation.
The SMS and social templates include fixed 'EST' references in natural-language content. Because the file does not clearly limit itself to an EST-only audience or provide locale alternatives, these examples can encourage forcing a specific locale without user opt-in.
No suspicious patterns detected.