Security audit
Security checks for vulnerabilities and agentic risk
This skill creates local offer drafts with limited access, but its pricing calculations and template handling need correction before customer use.
Use this only as a drafting aid until the markup calculation and template parser are fixed. Independently verify prices, margins, approval requirements, and offer terms before sending anything. Choose a dedicated output folder because reruns overwrite price-tiers.md. The optional unsigned Windows app is unnecessary for the core workflow and is outside this assessment.
Without declared permissions the skill's intent is opaque and cannot be validated.
The documented 40% markup is applied as a multiplier of 40 instead of 1.40, producing a first-tier price of $4,800 rather than $168. In an offer-design skill, this integrity defect can directly contaminate customer-facing quotes and approval decisions, causing lost sales and reputational harm; there is no evidence of malicious intent or a separate attacker-controlled exploit.
No suspicious patterns detected.
