Security audit
Security checks for vulnerabilities and agentic risk
The skill provides owner-reviewed menu drafting and a local duplicate checker, with setup and accuracy limitations but no hidden or excessive access.
Use CSV input with a menu_item_name column for the helper; the supplied YAML quickstart does not match the implementation. Have the kitchen review allergen claims and verify regulatory requirements independently: the stated 10-location/$20 million threshold is not supported by [FDA guidance](https://www.fda.gov/food/nutrition-food-labeling-and-critical-foods/menu-labeling-requirements). The optional unsigned Windows app is unnecessary for this workflow and requires separate assessment.
The supplied code implements a standalone duplicate-reporting utility. Although deduplication could support a broader menu-writing workflow, this chunk contains no copywriting or compliance-checking functionality, making its primary behavior materially different from the declared purpose. Local CSV reads and report writes are ordinary implementation details, not separate security concerns.
Deduplication could support menu preparation, but it is the only operation shown. The supplied chunk does not demonstrate description writing, allergen wording, price formatting, or federal labeling checks, making its apparent primary function materially different from the declared purpose. This assessment is limited to the visible invocation; the script's internal behavior cannot be verified.
Without declared permissions the skill's intent is opaque and cannot be validated.
The manifest promises menu descriptions, allergen statements, price display, and federal menu-labeling checks. This workflow only groups rows by normalized menu item name and writes a duplicate report; the guardrails at L101–L103 are printed instructions, not implemented checks.
L004 explicitly says the script finds and merges duplicate records. In L085–L104, duplicate rows are collected for reporting, but no records are merged and no consolidated dataset is written.
No suspicious patterns detected.
