Security audit
Security checks across malware telemetry and agentic risk
This skill appears aimed at dependency vulnerability scanning, but its privacy and network behavior are inconsistent enough that users should review it before installing.
Install only if you are comfortable with dependency names or hashes potentially being sent to public vulnerability databases. Treat scan reports as sensitive, scope scanning to projects you are authorized to assess, and verify whether the actual workflow is offline or network-assisted before use.
All permissions above are capability requirements, not blanket authorization. Grant only what the selected workflow needs, scope filesystem access to the working directory, and do not elevate privileges unless SKILL.md explicitly requires and explains it. ## 🔒 Security & Privacy
VirusTotal findings are pending for this skill version.
No suspicious patterns detected.
