Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward content-drafting workflow with disclosed local draft saving and Discord notification steps, but users should be aware it has side effects beyond returning text.
Install this only if you want the agent to save carousel drafts into the named Obsidian vault path and notify the specified Discord task channel. Review or adjust those destinations if they do not match your environment, and require confirmation before posting to Discord if topic privacy matters.
The skill explicitly instructs the agent to write output to a fixed local filesystem path under the user's home directory without any prompt, confirmation, or disclosure. Even though the content is low-risk marketing material, silent file creation/modification is a real side effect that can surprise users, overwrite data, or be chained with other skills to persist unwanted content.
The skill instructs the agent to post a message to a Discord channel, which is an external transmission, without user consent or clear warning. Although the message is only a status update, it still leaks activity and topic metadata to a third-party service and normalizes autonomous outbound communication.
No suspicious patterns detected.
