Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward automation-workflow guide, with no executable code or hidden persistence behavior found.
Before using the suggested automations, review each connected app's permissions and test workflows with non-sensitive or test data, especially for automations that send emails, post publicly, update CRM records, or change invoices/payments.
The trigger phrases are broad and include common terms like "automate," "save time," and "reduce manual work," which can cause the skill to activate in many unrelated conversations. Overbroad activation increases the chance of unintended invocation, context leakage into the skill, and inappropriate automation guidance being injected when the user did not explicitly request it.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
### Invoice and payment tracking
No suspicious patterns detected.