Security audit
Security checks for vulnerabilities and agentic risk
This local reporting skill has proportionate access, but its summaries need checking for omitted findings and copied repair prices.
Review every summary against the original inspection notes and remove repair prices manually. The supplied YAML template does not match the helper's Markdown-heading parser, so findings can be omitted. Use a fresh output directory because digest.md is overwritten. The optional [publisher's Windows app](https://github.com/rapidworker1/Multiple-AI-models-Toolkit) is unnecessary for this workflow and requires separate assessment.
Without declared permissions the skill's intent is opaque and cannot be validated.
The script copies every nonempty line from matching input sections into the report without checking for repair estimates or contractor pricing. Appending a no-estimates guardrail afterward does not remove prohibited content, so ordinary or deliberately crafted notes can produce a buyer-facing summary that violates the skill's explicit restriction. This is an output-integrity failure rather than code execution, with added significance because buyers may rely on the summary when making financial decisions.
No suspicious patterns detected.
