Security audit
Security checks for vulnerabilities and agentic risk
This skill is a note-refinement formatter that reads a user-selected markdown file and creates related markdown outputs without hidden execution, networking, credential access, or persistence.
Before installing, understand that the skill may rewrite, merge, and omit material in its generated refined copy. Use it on intended note files, review the plan before approval, and check where the plan, refined output, and backup files will be created.
The description includes broad invocation phrases like 'clean up notes', 'summarize reading', and 'refine bookmarks', which can cause the skill to trigger in situations beyond the user's precise intent. Overbroad routing increases the chance that unreviewed content transformation or file-modifying behavior is applied to sensitive or unintended inputs.
The skill instructs the agent to save output files and back up existing refined files, but it does not require a clear user-facing warning or explicit consent before modifying the filesystem. In an agent setting, silent writes and backups can overwrite user expectations, create unwanted artifacts, or modify the wrong file when the target is inferred incorrectly.
