ask-ai

Use external AI assistants (ChatGPT, Claude, Gemini, DeepSeek) when agent encounters difficult problems. Trigger when: (1) User explicitly asks to consult AI...

Security Scan

The skill's purpose (consult external AI assistants) matches its instructions, but the runtime instructions are vague about what data is sent, include an automatic 'Trust Mode' that can send user data without consent, and reference third-party endpoints without safeguards—raising privacy and exfiltration concerns.

Purpose & Capability

The name and description say the agent will consult external AI assistants; the SKILL.md only instructs the agent to 'open' those assistants and relay answers. There are no unrelated environment or install requirements, so the requested capabilities align with the stated purpose.

Instruction Scope

Instructions repeatedly direct the agent to 'open' external AI assistants and relay user problems but provide no constraints on what to send (no sanitization, redaction, or consent flow beyond Ask Mode). Trust Mode allows automatic queries without user confirmation. The behavior could cause sensitive user data to be sent to third-party websites; 'open' is ambiguous about how the agent transmits content (web UI, automated API, clipboard), increasing risk.

Install Mechanism

Instruction-only skill with no install spec or code files; nothing is written to disk and there is no package installation risk.

Credentials

The skill declares no required environment variables, credentials, or config paths. There are no obvious requests for unrelated secrets or system access.

Persistence & Privilege

always:false and user-invocable:true (normal). However, the Trust Mode enables autonomous queries to external services, which combined with the vague instructions creates a data-exfiltration vector if the agent is allowed to act without user supervision.

Scan Findings in Context

[no-findings] expected: Regex scanner found nothing; this is expected because the skill is instruction-only (no code files) so there was nothing to analyze.

What to consider before installing

This skill will send your prompts and problem details to external websites (ChatGPT/Claude/Gemini/DeepSeek). By default it asks first, but Trust Mode will do this automatically. Before installing, consider: (1) Do you consent to sending potentially sensitive data to third parties? (2) Are the listed URLs official and trustworthy (DeepSeek is unfamiliar)? (3) Prefer Ask Mode and disable Trust Mode to preserve consent. If you must use Trust Mode, add explicit redaction rules (avoid sending secrets, PII, or files) or require API-based integrations that you control. If you cannot verify the endpoints or enforce data handling rules, do not enable this skill.

Use external AI assistants when you need help solving complex problems.

When to Use

• User explicitly asks: "Ask AI", "Ask ChatGPT", "Consult AI"
• You encounter knowledge gaps or cannot solve independently
• Need deeper explanations or multi-round reasoning
• Complex problems requiring external expertise

Two Modes

Mode	Behavior
Ask Mode (default)	Ask user first: "Need help from GPT?"
Trust Mode	Automatically ask AI without asking

Switch modes: Say "Trust Mode" → auto mode | "Ask Mode" → default

Supported AI

• ChatGPT: https://chatgpt.com
• Claude: https://claude.ai
• Gemini: https://gemini.google.com
• DeepSeek: https://chat.deepseek.com

Workflow

Ask Mode:

1. Encounter difficult problem → Ask user: "This is tricky. Want me to ask GPT?"
2. User agrees → Open AI assistant
3. Get answer → Report to user

Trust Mode:

1. Encounter difficult problem → Automatically open AI
2. Get answer → Solve directly

Communication

• Asking: "Let me ask GPT for help. Is that okay?"
• Auto: "I'll ask GPT for help. One moment."
• After answer: "Got the answer from [AI]: [summary]. Want details?"