Security audit
Security checks for vulnerabilities and agentic risk
This skill needs review because its advertised checker misses risky employee-review wording while reporting “No flags.”
Do not rely on the checker until its matching logic is corrected and tested. Have HR review drafts independently, protect employee notes and reports, and assess the optional Windows executable separately.
Without declared permissions the skill's intent is opaque and cannot be validated.
The checker uses substring membership instead of regex matching, so ordinary phrases such as 'too old' or 'should be terminated' do not match the regex-formatted rules and produce a misleading 'No flags' report. In a performance-review workflow, this silently defeats a compliance safeguard and may give managers or HR false assurance about discriminatory or sensitive wording, although human review remains an explicit requirement.
No suspicious patterns detected.
