Security audit
Security checks for vulnerabilities and agentic risk
This skill is a static prompt-library helper with a clearly disclosed English/Spanish scope and no executable or privileged behavior.
Installers should understand this skill only provides bundled prompt templates in English and Spanish. It appears low risk from a security standpoint, but users should still review generated finance, HR, or business prompts before relying on them for professional decisions.
The CSV enumerates prompts only for 'en' and 'es', and each prompt text is hardcoded in that language. This can constitute a locale/language policy violation because the skill content is constrained to specific languages without indicating user choice, opt-in, or a justified regional limitation.
The manifest description and capability list state that the skill supports only EN/ES, which is a natural-language locale constraint. The file does not justify the restriction as region-specific or explicitly frame it as an opt-in choice beyond asking users to pick between those two languages.
No suspicious patterns detected.
