Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed workflow guide for AI-assisted software development, with no hidden execution, credential access, persistence, or unrelated data handling.
Install this if you want a structured, phased coding workflow. Be aware it may activate for broad build or debugging requests and add process overhead, so use explicit wording when you do or do not want the workflow.
The trigger phrase at this location is broad enough that normal user requests about building something 'step by step' could invoke the skill unintentionally. Unintended invocation can steer conversations into a prescribed workflow the user did not explicitly request, causing incorrect routing, confusion, or over-application of the skill in unrelated coding contexts.
The phrase 'I have a bug I can't fix' is a common everyday support request and is too vague to uniquely indicate this specific workflow skill. Because debugging is a broad domain, this trigger may capture many unrelated troubleshooting requests and force an unnecessary workflow entry point, reducing accuracy and potentially interfering with more appropriate skills.
The skill description uses very broad trigger phrases such as 'help me build a project step by step', 'asks how to start a new feature or project with AI', and 'encounters bugs they can't resolve', which overlap with a large fraction of general software-assistance requests. This can cause the skill to activate outside its intended niche, increasing prompt-surface exposure and making it easier for this workflow to override or interfere with more appropriate, narrower skills.
No suspicious patterns detected.
