Security audit
Security checks for vulnerabilities and agentic risk
This appears to be an unfinished skill template, not a harmful skill, but it should not be installed as a useful web-navigation skill until completed.
Do not rely on this as a finished web-navigation skill. Ask the publisher to replace the TODOs with a clear purpose, activation criteria, allowed and prohibited browsing actions, and confirmation requirements before installing it for normal use.
The skill description and activation guidance are left as TODO text, so there is no defined scope for when this skill should or should not be invoked. In an agent system, ambiguous triggers can cause inappropriate activation, misuse of web-access capabilities, or unsafe behavior because operators and downstream tooling cannot distinguish intended from unintended use cases.
The overview section is unfinished and provides no operational context, constraints, or expected behavior. For a web navigation skill, missing boundaries increases risk because the agent may perform broad or unintended browsing actions without guidance on allowed domains, sensitive actions to avoid, or required user confirmation points.
The main body of the skill is still template placeholder content rather than concrete instructions, leaving the actual behavior undefined. This is dangerous because a partially specified skill—especially one involving web navigation—can be activated without enforceable procedures, resulting in inconsistent decisions, overbroad actions, or accidental interaction with untrusted or sensitive web content.
No suspicious patterns detected.
