Security audit
Security checks for vulnerabilities and agentic risk
This skill provides audio buying, setup, and used-price guidance with a small local CSV helper and no hidden access, persistence, or data sharing.
Installers should understand that this skill may ask for purchase context, room details, existing audio gear, and listing-price data. Use the CSV helper only with listing data you are comfortable processing locally; no evidence shows it sends data elsewhere.
The activation guidance says to use this workflow when the user asks "what should I buy" or "is X + Y a good match," which are common, broadly phrased questions. The file does not add scope constraints or negative examples to limit invocation to a specific domain, increasing the chance of unintended triggering.
The phrases "how to place," "why bass boomy," and "how to tune" are not sufficiently bounded and could match general questions outside the intended audio setup context. No negative examples or explicit context limitations are provided to distinguish when this template should or should not be used.
The trigger examples "is this listing worth it" and "what is fair price" are generic marketplace questions that commonly occur in many contexts. Because the file does not explicitly restrict them to used audio equipment or provide exclusions, the trigger scope is overly broad.
No suspicious patterns detected.
