Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple group-chat behavior guide with no executable code, network access, persistence, or hidden data-handling behavior.
Before installing, confirm the group actually wants this assistant to participate and react in chats, and adjust the AEST quiet-hours assumption if the group operates in another timezone. The privacy rule is appropriate, but users should still ensure the host agent does not disclose private memory or DM context into group conversations.
The activation guidance relies on subjective phrases like 'be smart about when to contribute', 'add clear value', and 'something witty and appropriate fits naturally' without clear constraints or negative examples. In a markdown skill file, this can cause unintended or inconsistent invocation because the boundaries for when the skill should speak are not specific enough.
The instruction 'Late night (23:00–08:00 AEST) unless urgent' imposes an AEST-specific locale policy on behavior. This is a natural-language policy concern because it forces a specific timezone/locale assumption without offering user choice or documenting why that locale is required.
No suspicious patterns detected.
