Security audit
Security checks for vulnerabilities and agentic risk
This is a plain Markdown skill for Python development help, with disclosed but broad coding and scraping capabilities and no hidden execution, persistence, or bundled code.
Install only if you want a broad Python development helper. For API and scraping work, provide only authorized targets and data, and require generated code to respect site terms, rate limits, privacy rules, and secret-handling best practices.
The description says 'Use when you need working Python code, API integrations, data processing, or CLI utilities,' which is a very broad activation cue for a manifest/markdown file. It does not define clear trigger boundaries, exclusions, or negative examples, increasing the risk of unintended invocation for general software requests.
The skill advertises web scraping output without any warning about privacy, authorization, rate limits, robots.txt, or terms-of-service constraints. In an autonomous coding context, this omission can normalize generation of scrapers that perform network activity against third-party sites in ways that create legal, privacy, or operational risk.
No suspicious patterns detected.
