Security audit
Security checks for vulnerabilities and agentic risk
This is a markdown-only performance monitoring skill whose behavior fits its stated purpose, with caution needed before applying real infrastructure changes.
Install only if you want an agent to help with observability and performance monitoring. Before allowing it to change a real environment, confirm the target systems, telemetry sensitivity, collector overhead, alert destinations, integrations, and rollback plan.
The skill's invocation guidance is extremely broad and effectively allows activation for any performance-related context without clear trigger boundaries, scope limits, or disambiguation rules. In a multi-agent environment, this can cause inappropriate activation, overreach into unrelated tasks, or autonomous monitoring actions being proposed or taken where the user did not explicitly request them.
The implementation phase instructs the agent to install collectors, configure aggregation, set up alerts, and enable integrations without any safety gate, change-control step, or warning about operational impact. In this context, that is dangerous because monitoring changes can alter production systems, increase load, introduce security/privacy exposure through telemetry collection, and create unauthorized infrastructure modifications.
No suspicious patterns detected.
