Security audit
Security checks for vulnerabilities and agentic risk
The skill needs review because its advertised privacy and compliance checker misses the warning phrases it is designed to detect.
Use this only to prepare drafts. Have the checker corrected and tested before relying on its results, and independently review privacy, consent, and legal requirements before sending anything. Keep real customer details out of shared templates. The optional unsigned Windows app is unnecessary for the bundled workflow and requires separate assessment.
Without declared permissions the skill's intent is opaque and cannot be validated.
The checker tests whether each entire regex string occurs literally in the input instead of evaluating it, so ordinary text such as 'no opt out' or 'test result' produces no flag. Because this skill generates compliance-oriented reminder copy, the resulting 'No flags' report can create false assurance and allow privacy-sensitive content or potentially noncompliant messaging to pass review; there is no evidence that this defect is intentional.
No suspicious patterns detected.
