Security audit
Security checks for vulnerabilities and agentic risk
This skill provides onboarding conversion advice and does not request unusual access, persistence, code execution, or hidden behavior.
Before installing, expect this skill to guide onboarding and activation strategy and to read a local product marketing context file if one exists. Its main caveat is scope overlap with signup, retention, or email-sequence work, so users should choose the more specific skill when the task is not about post-signup first-run activation.
The skill's invocation description is overly broad and includes general retention and engagement problems that may overlap with adjacent skills. This can cause the agent to select this skill in situations outside its intended scope, leading to irrelevant guidance, missed use of more appropriate skills, and degraded reliability of task routing.
The evaluation explicitly rewards the skill for triggering on very casual language like 'users sign up but then never come back' without requiring stronger scope checks. That can cause over-broad activation of the onboarding skill in ambiguous situations, increasing the chance the agent applies the wrong guidance or overrides a more appropriate skill, especially because the skill already has broad routing language around activation, retention, and first-session problems.
No suspicious patterns detected.
