Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent influencer marketing workflow guide with disclosed outreach and recordkeeping behavior, not a hidden or destructive package.
Install this when you want an agent to help manage creator partnerships. Before use, define approved outreach rules, sender accounts, allowed recipient classes, suppression or opt-out handling, and what kinds of messages may be sent without fresh confirmation.
The activation guidance says to use the skill whenever work involves 'a marketing decision or an evolving creator relationship' across a very wide list of activities. This is expansive and lacks concrete exclusion examples, so it may overlap with many routine marketing requests and cause unintended invocation.
The playbook directs the agent to identify creators, verify business contacts, and send external outreach, but it does not prominently require explicit user authorization and privacy/compliance safeguards before collecting, storing, and using personal or business contact data. In an autonomous agent context, this can lead to unsolicited external contact, misuse of scraped contact details, or processing of personal data without adequate consent, policy checks, or jurisdiction-specific compliance review.
No suspicious patterns detected.
