Security audit
Security checks for vulnerabilities and agentic risk
This private-equity workflow is coherent overall, but it should be reviewed because it can direct an agent to search Gmail and Slack without an explicit consent or scope limit.
Install only if users understand that deal sourcing may inspect connected Gmail and Slack. Require explicit confirmation before using those sources, limit searches to named companies or founders, prefer metadata or existence checks, and avoid quoting or summarizing message contents unless the user asks for it.
In a markdown skill description, trigger phrases should be specific enough to avoid accidental invocation. "find companies" is generic and could match many unrelated requests, especially outside the intended private-equity sourcing context.
The deal-sourcing workflow instructs the agent to search Gmail and Slack for prior correspondence, which expands access into sensitive communications beyond the core task of identifying companies and drafting outreach. Even if relationship-checking is business-relevant, the skill does not constrain scope, require explicit consent, or limit what data may be retrieved and summarized, creating a real privacy and data-exposure risk.
The skill tells the agent to inspect email and Slack for prior discussions without any privacy warning, consent gate, or least-privilege guidance. In a PE workflow, those systems may contain confidential deal discussions, personal data, and privileged material, so silent querying or summarization could expose sensitive information to the wrong user or context.
Natural-language policy requires avoiding forced language or locale constraints without user opt-in or clear justification. The document switches into Chinese for section headings and descriptive text with no indication that the user can choose language or that the skill is region-specific.
This phrase is common conversational language and does not clearly indicate PE returns modeling on its own. Without stronger constraints, it may cause unintended activation for unrelated rough calculations.
No suspicious patterns detected.
