Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed founder-coaching skill made of Markdown guidance, with no code execution, persistence, credential access, or hidden data handling.
Before installing, treat this as startup coaching and reference material, not professional legal, financial, medical, or mental-health advice. Its market, regulatory, and crypto data is dated November 2025, so verify time-sensitive facts before making major decisions.
Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.
### Reality Questions
Understand current situation without judgment:
- "Where are you now on a scale of 1-10?"
- "What's happening at the moment?"
The description includes broad natural-language triggers such as 'should I', 'help me think through', and 'what am I missing', which are common across many general conversations. This can cause the skill to be invoked in situations beyond founder coaching, increasing the chance of unintended activation and inappropriate influence over unrelated decisions.
The skill includes prompts about fear, self-doubt, burnout, overwhelm, and seeking professional support, which can invite users to disclose mental-health concerns. Without a clear boundary that this is coaching rather than mental-health care, plus crisis guidance for high-risk situations, users may over-rely on the skill or receive inappropriate support in situations needing trained intervention.
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
permissions granted by this License.
"Source" form shall mean the preferred form for making modifications,
including but not limited to software source code, documentation source, and
configuration files.
"Object" form shall mean any form resulting from mechanical transformation or
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
permissions granted by this License.
"Source" form shall mean the preferred form for making modifications,
including but not limited to software source code, documentation source, and
configuration files.
"Object" form shall mean any form resulting from mechanical transformation or
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
permissions granted by this License.
"Source" form shall mean the preferred form for making modifications,
including but not limited to software source code, documentation source, and
configuration files.
"Object" form shall mean any form resulting from mechanical transformation or
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
permissions granted by this License.
"Source" form shall mean the preferred form for making modifications,
including but not limited to software source code, documentation source, and
configuration files.
"Object" form shall mean any form resulting from mechanical transformation or
No suspicious patterns detected.