Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent plant-care guide with no executable code, but it gives specific pesticide and fungicide advice without enough safety warnings for users.
Review the chemical-treatment sections carefully before installing. The skill appears non-executable and purpose-aligned, but users should be told to follow local product labels, use appropriate protective equipment, keep chemicals away from children and pets, and prefer lower-risk controls when possible.
The documented triggers are broad enough to match common plant-related requests such as photos, care questions, and diagnosis queries, which can cause the skill to activate when the user did not explicitly intend to invoke it. This is not a code-execution issue, but it can lead to unintended skill routing, confusing responses, or overshadowing other more appropriate skills.
The guide recommends multiple pesticides and fungicides such as imidacloprid, abamectin, malathion, carbendazim, chlorothalonil, sulfur powder, and acetamiprid without any safety warnings, PPE guidance, dilution instructions, ventilation advice, storage/disposal cautions, or instruction to follow local product labels. In a consumer-facing plant-care troubleshooting document, this omission can lead users to misuse toxic chemicals around people, pets, food areas, or pollinators, causing poisoning or environmental harm.
The example phrase 'Help me identify this plant' is ordinary conversational language and may be reused by many benign interactions, making it a weak trigger anchor if used operationally. Generic phrases increase the chance of accidental invocation and reduce separation between this skill and adjacent capabilities.
This markdown file provides care instructions for many plants, including some explicitly noted as hazardous, but it does not include a user-facing warning about pet/child toxicity or skin irritation risks. For example, Rubber Plant is described as having 'white milky sap,' which can irritate skin, yet no caution accompanies the care guidance.
At the Giant Taro entry, the file explicitly notes the plant is 'somewhat toxic' and then immediately gives care instructions without any warning about ingestion or contact hazards. Under the markdown-file warning criteria, behaviour affecting user safety should be disclosed when the skill encourages plant care actions.
No suspicious patterns detected.
