Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward bidding-document assistant with no executable code, persistence, credential use, network behavior, or hidden actions.
Install only if you want bidding/proposal drafting help. When using it, provide only the tender sections needed for the task, redact unnecessary personal ID numbers, tax/social-security details, and financial data, and have a qualified reviewer check pricing, legal, and compliance content before submission.
The trigger conditions are broad enough that ordinary discussion of bidding, proposal writing, or technical plans could activate the skill unintentionally. In this skill’s context, unintended activation is more concerning because it can prompt users to provide sensitive procurement, identity, qualification, and financial documents that were not necessary for their original request.
The skill instructs collection and processing of highly sensitive bidding and identity-related materials, including ID documents, licenses, tax/social-security records, financial statements, and qualification documents, but provides no warning, minimization guidance, or handling precautions. In a procurement context, this increases the risk of over-collection, inadvertent disclosure, and misuse of regulated or business-sensitive information.
