Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward customer journey map generator, with only minor file-overwrite and activation-scope caveats.
Before installing, consider asking the agent to write outputs into a dedicated folder or confirm before replacing existing journey_map.svg, journey_map.png, or journey_map.pdf files. The skill does not show hidden network access, credential handling, persistence, or destructive behavior.
The activation description is broad enough to trigger on many generic visualization or mapping requests, which can cause the agent to invoke this skill outside its narrowly intended use. Over-broad activation increases the chance of unintended file generation, renderer invocation, or unsafe downstream handling of untrusted input in contexts where the user did not explicitly request this capability.
The skill instructs the agent to always produce fixed output filenames, but it does not warn that existing files may be overwritten. In an automated workspace, this can destroy or replace prior artifacts, and the risk is amplified because the filenames are deterministic and export is mandatory.
No suspicious patterns detected.
