Security audit
Security checks for vulnerabilities and agentic risk
This is a simple community onboarding skill with broad activation wording but no hidden code, data access, persistence, or privileged behavior.
Before installing, be aware that this skill may activate on general onboarding or getting-started requests and steer the conversation toward $NEURONS community guidance. It is otherwise low risk based on the inspected artifacts.
The 'When to Use' section includes generic triggers such as 'A new user arrives' and 'Someone asks “what is this / how do I start?”', which overlap with common everyday support language. The file does not provide narrower scope, explicit constraints, or negative examples to distinguish when this skill should activate versus other help or onboarding skills.
The trigger list includes generic phrases such as "onboarding," "new member," "how do I start," and "getting started," which are likely to match ordinary user requests outside the intended scope. This can cause the skill to activate unexpectedly, intercept unrelated conversations, and steer users into token/community guidance when they did not request it.
The 'When to Use' section includes triggers like 'A new user arrives' and 'Someone asks “what is this / how do I start?”', which are broad and could overlap with many generic conversations. The file does not provide explicit exclusion conditions or tighter scope to clarify when this skill should not activate.
No suspicious patterns detected.
