Security audit
Security checks for vulnerabilities and agentic risk
This is a documentation-only skill for creating and reviewing requirements documents, with no commands, network access, persistence, or sensitive data handling.
This skill is reasonable to install if you want structured help drafting or reviewing PRDs and requirements specs. Be aware that it may activate for product-spec writing or review requests, but its behavior is limited to document guidance and templates.
The quick-start instruction is broad enough to trigger on generic requests like 'write' or 'review' a document, which can cause the skill to activate outside its narrowly intended context. This is not directly harmful by itself, but over-broad activation increases the chance of inappropriate routing, user confusion, or unintended application of the skill in unrelated workflows.
The trigger says to activate when a user asks to write, draft, review, or structure a requirements document, PRD, or product spec, which is a broad natural-language condition without clear boundaries or exclusion examples. Because these verbs are common in everyday product-work conversations, the skill may be invoked in situations where the user is not explicitly seeking this framework-based requirements skill.
No suspicious patterns detected.
