Security audit
Security checks for vulnerabilities and agentic risk
This startup-advice skill is a plain Markdown guidance skill with purpose-aligned use of web research and no executable code, persistence, or hidden privileges.
Before installing, understand that this skill may use web searches for startup research. Do not include confidential strategy, customer data, financials, or unreleased product details unless you are comfortable with them being used to form external search queries.
The invocation phrases are overly broad and can cause the skill to trigger on generic business questions that may not actually call for this specialized workflow. This increases the chance of unintended activation, causing irrelevant guidance, unexpected tool use, or interception of user requests that should be handled by a different, narrower skill.
The skill explicitly directs the agent to use web_fetch and search tools to gather external data, but it does not disclose that external retrieval may occur or obtain user confirmation. This can lead to privacy and data-handling issues if user-provided business details are used to formulate external queries, and it may surprise users who expected a local-only response.
The instruction to output only the consulting advice body, combined with the rest of the document being written in English but oriented around a fixed presentation style, provides no explicit user option for language or locale preference. Under the policy, skills should not implicitly force a single language/locale without opt-in or clear justification.
No suspicious patterns detected.
