Security audit
Security checks for vulnerabilities and agentic risk
This is a generic development-and-testing workflow skill with broad activation wording but no hidden code, persistence, credential handling, or unsafe automation.
Install this if you want a general disciplined workflow for coding tasks. Be aware it may activate often because its description is broad; for specialized work such as security reviews, deployments, or repo-specific release processes, prefer a more specific skill or project instructions.
The description is extremely broad ("applies to any development work"), which can cause the skill to activate for a large share of ordinary coding requests. Over-broad activation increases the chance the agent follows this workflow in inappropriate contexts, potentially overshadowing more specific or safer skills and expanding the blast radius of any bad guidance embedded in the skill.
The use-case section lists very broad categories (bug fixes, features, refactors, open-source contributions, any code change) but does not define boundaries for when the skill should not be used. That ambiguity can make routing overly permissive, causing the SOP to be applied to requests outside its intended scope and reducing control over tool/skill selection.
No suspicious patterns detected.
