Security audit
Security checks for vulnerabilities and agentic risk
This is a static product-design and copywriting style skill with no runtime code, persistence, or hidden data access.
Install this if you want an opinionated Apple-inspired product and messaging lens. Be aware that broad prompts like “simplify this” may activate it, and do not run the footer `npx` command unless you trust the external package source.
The manifest description says the skill triggers on phrases like 'simplify this,' 'product strategy,' and even 'any request for radical simplification and craft.' These activation cues are broad, overlap with ordinary work conversations, and do not provide clear exclusion conditions, increasing the risk of unintended invocation.
The skill includes a command invoking an external package via npx skills without any version pinning or integrity control. If a user or downstream system copies and runs this command, they may fetch and execute an unexpected or compromised package version, creating a supply-chain risk.
The copywriting rules prescribe a specific linguistic style such as 'Short sentences. Short words.' and enforce a particular rhetorical mode without offering language or locale choice. While this is stylistic rather than overtly regional, it still directs output language behavior without explicit user opt-in.
No suspicious patterns detected.
