Security audit
Security checks for vulnerabilities and agentic risk
The skill provides local sales-planning tools with human-controlled sending, but its generated plan needs substantial manual completion.
Manually complete the channels, message copy, business-day dates, and stop conditions before using the plan. Choose a fresh output folder because plan.md is overwritten. The optional Windows app is unnecessary for this workflow and requires a separate trust decision.
The code is related to sales follow-up planning, but materially underimplements the description's core promised output. Its dated entries lack channels and business-day gaps, and most entries contain only a generic label. Local input reading and Markdown output are supporting implementation details; no unrelated access, outbound communication, or hidden execution is evident.
Without declared permissions the skill's intent is opaque and cannot be validated.
The manifest promises a dated US deal-follow-up plan listing each touch, channel, and business-day gap. The implementation adds fixed seven-calendar-day increments and outputs only a date and a focus or 'next block' label, without channels, business-day gap calculations, or adjustment for non-business days.
No suspicious patterns detected.
